DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Deleted My Entire Security Stack. My Apps Got Safer.

I Deleted My Entire Security Stack. My Apps Got Safer.

4
Comments
3 min read
Sizing the Industrial Control Surface: What 41,601 Reachable EtherNet/IP Endpoints Tell Us About OT Exposure

Sizing the Industrial Control Surface: What 41,601 Reachable EtherNet/IP Endpoints Tell Us About OT Exposure

Comments
4 min read
I scanned my own laptop: 6 AI agents, 14 MCP servers, 12 unpinned, 5 plaintext keys

I scanned my own laptop: 6 AI agents, 14 MCP servers, 12 unpinned, 5 plaintext keys

Comments
2 min read
AiGuard

AiGuard

Comments
1 min read
Default-deny beats allow-everything-then-trim

Default-deny beats allow-everything-then-trim

Comments
1 min read
The Vulnerability Scanner Is Not the Hard Part. The Handoff Is.

The Vulnerability Scanner Is Not the Hard Part. The Handoff Is.

Comments
4 min read
I tried giving a 26 MB Burp Suite dump to an LLM. It didn't work. So I built BurpSqueezer.

I tried giving a 26 MB Burp Suite dump to an LLM. It didn't work. So I built BurpSqueezer.

Comments
2 min read
I scanned 14 MCP servers on my laptop, then compiled a least-privilege policy from what my agent actually did

I scanned 14 MCP servers on my laptop, then compiled a least-privilege policy from what my agent actually did

Comments 1
2 min read
I Found Open Directory Listing Exposing .env, .git, and Database Backups in mail.adkcompany.com

I Found Open Directory Listing Exposing .env, .git, and Database Backups in mail.adkcompany.com

Comments
2 min read
The Semantic Gap: When Read-Only Web Access Fails to Contain AI Agents

The Semantic Gap: When Read-Only Web Access Fails to Contain AI Agents

2
Comments
5 min read
Fingerprint at load, pulse before every pass: a heartbeat for agent identity

Fingerprint at load, pulse before every pass: a heartbeat for agent identity

Comments 1
5 min read
Build a Production-Ready OTP Verification Flow with a Global SMS API

Build a Production-Ready OTP Verification Flow with a Global SMS API

Comments
4 min read
I Found an OTP Bypass in The Kari Kadai App That Leaks User Tokens

I Found an OTP Bypass in The Kari Kadai App That Leaks User Tokens

Comments
1 min read
Solana Durable Nonces: The Transaction That Never Expires

Solana Durable Nonces: The Transaction That Never Expires

1
Comments
6 min read
How I Found an Unauthenticated Admin Panel Leading to Potential RCE at Sun TV Network HRMS (CERT-In Acknowledged)

How I Found an Unauthenticated Admin Panel Leading to Potential RCE at Sun TV Network HRMS (CERT-In Acknowledged)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.