DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Governed Execution Gateway: Securing MCP Servers and Tool Egress Proxies

The Governed Execution Gateway: Securing MCP Servers and Tool Egress Proxies

12
Comments 2
3 min read
I Let an Agent Take Over an Account With Every Permission Check Green

Runnable proof shows session-split bypasses

I Let an Agent Take Over an Account With Every Permission Check Green

25
Comments 71
4 min read
Offline License Validation in Rust

Offline License Validation in Rust

Comments
5 min read
How to Prevent License Key Sharing

How to Prevent License Key Sharing

Comments
4 min read
Blue Watch, Day 4-6: From Alerts to a Story

Blue Watch, Day 4-6: From Alerts to a Story

Comments 3
3 min read
Fix GitHub Copilot Terraform Security Risks Before They Hit Prod

Fix GitHub Copilot Terraform Security Risks Before They Hit Prod

Comments
11 min read
Zero-Trust Data Sovereignty: Enforcing Localized MCP Tool Policies in Multi-Region Stacks

Zero-Trust Data Sovereignty: Enforcing Localized MCP Tool Policies in Multi-Region Stacks

41
Comments
6 min read
The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

The AI Can Find Your Bug. It Just Doesn't Know It's a Bug.

Comments 1
6 min read
My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

My 7/7 Gate Fell to One Admin Capability. A Second Witness Only Moved the Wall.

24
Comments 3
13 min read
AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

1
Comments 2
3 min read
A Hidden Button Is Not an Authorisation Boundary

A Hidden Button Is Not an Authorisation Boundary

Comments
4 min read
Are Microsoft Signed Packages Safe? 73 Were Not

Are Microsoft Signed Packages Safe? 73 Were Not

Comments
8 min read
Command Injection in PHP — When exec() Becomes an Attack Surface

Command Injection in PHP — When exec() Becomes an Attack Surface

1
Comments
9 min read
Are USB Devices a Security Risk for Your PC?

Are USB Devices a Security Risk for Your PC?

Comments
8 min read
Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Dominican Republic e-CF: how one tampered byte invalidates your invoice (and how to catch it)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.