DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why Read-Only Is the Only Safe Way to Let AI Near Your AWS Account

Why Read-Only Is the Only Safe Way to Let AI Near Your AWS Account

Comments
5 min read
51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

51 Findings in SadCloud: What a Verifier Sees That Scanners Frame Differently

Comments
3 min read
Design API Access Revocation So Users Know What Actually Gets Deleted

Design API Access Revocation So Users Know What Actually Gets Deleted

Comments
4 min read
The 403 that started Zero-Access: read-only by architecture, not trust

The 403 that started Zero-Access: read-only by architecture, not trust

Comments 2
5 min read
NETO: Chat P2P local para equipos dev — sin nube, sin excusas

NETO: Chat P2P local para equipos dev — sin nube, sin excusas

Comments
1 min read
Designing SMS Login Flows for Roaming Users

Designing SMS Login Flows for Roaming Users

Comments
5 min read
Anyone with your tunnel URL can hit your dev machine — the attack surface nobody mentions

Anyone with your tunnel URL can hit your dev machine — the attack surface nobody mentions

Comments
2 min read
A hacked WordPress, two attackers, and the hole no antivirus saw

A hacked WordPress, two attackers, and the hole no antivirus saw

1
Comments
22 min read
Your PBX Software Is Only as Safe as the Ports You Left Open

Your PBX Software Is Only as Safe as the Ports You Left Open

1
Comments 1
8 min read
The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

Comments 1
9 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

Comments
11 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

Comments
9 min read
I Built 5 Python Security Tools in a Week — Here's What I Learned

I Built 5 Python Security Tools in a Week — Here's What I Learned

Comments
2 min read
AI agents are shadow AI's more dangerous sequel

AI agents are shadow AI's more dangerous sequel

1
Comments
3 min read
Running Popular OSINT & Recon Tools Natively on macOS (No VM, No Kali)

Running Popular OSINT & Recon Tools Natively on macOS (No VM, No Kali)

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.