DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Stop Patching by CVSS. Patch What Attackers Actually Use. 🚀

Stop Patching by CVSS. Patch What Attackers Actually Use. 🚀

6
Comments 2
21 min read
When an AI Agent Goes Wrong: A 16-Case First-Hour Response Runbook

When an AI Agent Goes Wrong: A 16-Case First-Hour Response Runbook

Comments
24 min read
Apache Knox: topology authentication and service ACLs need separate review

Apache Knox: topology authentication and service ACLs need separate review

Comments
3 min read
Nuxeo API authentication is only the first permission decision

Nuxeo API authentication is only the first permission decision

Comments
3 min read
Apache James WebAdmin: inventory the control plane before it is exposed

Apache James WebAdmin: inventory the control plane before it is exposed

Comments
3 min read
System design for physical AI: a patch cycle that learns from every confirmed call

System design for physical AI: a patch cycle that learns from every confirmed call

Comments
5 min read
Make Your Coding Agent Wait 7 Days for New Packages: npm, pnpm, Yarn, Bun and uv

Make Your Coding Agent Wait 7 Days for New Packages: npm, pnpm, Yarn, Bun and uv

1
Comments
9 min read
A Signed Puppet Report Reaches the Certificate Authority

A Signed Puppet Report Reaches the Certificate Authority

Comments
7 min read
npm's worms ride a few big accounts, not your dependencies

npm's worms ride a few big accounts, not your dependencies

Comments
6 min read
We built a client-side security linter for Model Context Protocol (MCP) and AI Agent configs

We built a client-side security linter for Model Context Protocol (MCP) and AI Agent configs

Comments
2 min read
How to generate an SBOM for a React Native app

How to generate an SBOM for a React Native app

Comments
4 min read
osFoundry Claude Code की tool allowlist को CLI flags में नहीं, MCP server पर क्यों लागू करता है

osFoundry Claude Code की tool allowlist को CLI flags में नहीं, MCP server पर क्यों लागू करता है

Comments
4 min read
A human approval step for an LLM agent: the boundary that matters

A human approval step for an LLM agent: the boundary that matters

Comments
2 min read
I Intercepted Network Traffic From 10 Popular Online JWT Decoders. 4 Of Them Secretly Uploaded My Bearer Tokens to Remote Servers.

I Intercepted Network Traffic From 10 Popular Online JWT Decoders. 4 Of Them Secretly Uploaded My Bearer Tokens to Remote Servers.

1
Comments
7 min read
Claude встраивает в ответы незаметный след: как он работает и что его убирает

Claude встраивает в ответы незаметный след: как он работает и что его убирает

Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.