DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your AI agent is only as secure as the tools and agents it calls

Your AI agent is only as secure as the tools and agents it calls

Comments
4 min read
'Local' Solves Where Your Data Goes. It Doesn't Solve What Your Agent Does

'Local' Solves Where Your Data Goes. It Doesn't Solve What Your Agent Does

20
Comments 15
9 min read
How to Update GDOM Database Credentials: Changing Users, Passwords, and IPs

How to Update GDOM Database Credentials: Changing Users, Passwords, and IPs

2
Comments
2 min read
npm Supply Chain RAT: PostCSS Impersonation & Dependency Confusion

npm Supply Chain RAT: PostCSS Impersonation & Dependency Confusion

Comments
6 min read
Inside the Uninsured Middle: An Operator's View of AI-Agent Operational Risk

Inside the Uninsured Middle: An Operator's View of AI-Agent Operational Risk

3
Comments
9 min read
Five features that turn an OS into a trust platform: Panic, Dead Man’s Switch, E2E messenger, Vault UI, and Secure Boot attestation in IONA OS

Five features that turn an OS into a trust platform: Panic, Dead Man’s Switch, E2E messenger, Vault UI, and Secure Boot attestation in IONA OS

3
Comments
4 min read
OpenIddict and IdentitySuite — secure configuration without the complexity

OpenIddict and IdentitySuite — secure configuration without the complexity

2
Comments
6 min read
Learning Web Security #1: Broken Access Control (OWASP Top 10 #1 - Beginner's Guide)

Learning Web Security #1: Broken Access Control (OWASP Top 10 #1 - Beginner's Guide)

Comments
7 min read
You Don't Own Your AI Agent. And Even If You Did, Would You Trust It?

You Don't Own Your AI Agent. And Even If You Did, Would You Trust It?

Comments
9 min read
Who Asked That? Identity, Accountability and the Agentic Query

Who Asked That? Identity, Accountability and the Agentic Query

Comments
6 min read
GitHub put Shell, Dockerfiles, Terraform and PHP behind a paywall. Here's a free Action that scans them.

GitHub put Shell, Dockerfiles, Terraform and PHP behind a paywall. Here's a free Action that scans them.

1
Comments 1
3 min read
I Scanned 5 Real Vibe-Coded Apps With a Security Scanner — Here's What I Found

I Scanned 5 Real Vibe-Coded Apps With a Security Scanner — Here's What I Found

Comments
4 min read
How I Built a Lightweight WordPress Plugin to Combat AdBlockers & Security Threats (WAF)

How I Built a Lightweight WordPress Plugin to Combat AdBlockers & Security Threats (WAF)

1
Comments
3 min read
VeloCloud Orchestrator CVE-2026-16812: Unauthenticated OS Command Injection Actively Exploited

VeloCloud Orchestrator CVE-2026-16812: Unauthenticated OS Command Injection Actively Exploited

Comments
5 min read
FortiOS CVE-2025-68686: Bypass of Symlink Persistence Mitigation for Already Compromised Devices

FortiOS CVE-2025-68686: Bypass of Symlink Persistence Mitigation for Already Compromised Devices

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.