DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Prompt Injection for API Teams: What It Is and How to Test for It

Prompt Injection for API Teams: What It Is and How to Test for It

1
Comments 1
12 min read
Detect VPNs, Proxies, and Bots in Your Web App: A Practical Guide

Detect VPNs, Proxies, and Bots in Your Web App: A Practical Guide

Comments
4 min read
How I Found and Fixed an Open Redirect Vulnerability in My Startup

How I Found and Fixed an Open Redirect Vulnerability in My Startup

Comments
3 min read
I Put Eight Security Bugs in a Flask App on Purpose. The Robots Only Caught Some of Them.

I Put Eight Security Bugs in a Flask App on Purpose. The Robots Only Caught Some of Them.

Comments 4
6 min read
We scanned 12 popular MCP servers. The most interesting finding was our own false positives.

We scanned 12 popular MCP servers. The most interesting finding was our own false positives.

Comments
4 min read
MCP, Tool Use, and the New Attack Surface Nobody Is Mapping

MCP, Tool Use, and the New Attack Surface Nobody Is Mapping

Comments
5 min read
PHP Bugs #21 to #30 — Common Mistakes Every PHP Developer Must Know published

PHP Bugs #21 to #30 — Common Mistakes Every PHP Developer Must Know published

1
Comments
5 min read
Stop deprovisioning by hand: make your HRMS the source of truth for access

Stop deprovisioning by hand: make your HRMS the source of truth for access

1
Comments
5 min read
Break Glass Accounts in Azure: Why You Need Them, How to Set Them Up, and What to Do When One Is Used

Break Glass Accounts in Azure: Why You Need Them, How to Set Them Up, and What to Do When One Is Used

Comments 1
12 min read
Gas Optimization That Doesn't Break Security: Storage, Calldata, and the Traps

Gas Optimization That Doesn't Break Security: Storage, Calldata, and the Traps

Comments
3 min read
Dream AI Cybersecurity Unicorn: Sovereign Defense Infrastructure & Attack Surface Implications

Dream AI Cybersecurity Unicorn: Sovereign Defense Infrastructure & Attack Surface Implications

Comments
5 min read
Two Things Fintech Backends Get Wrong

Two Things Fintech Backends Get Wrong

Comments 1
4 min read
The OpenAI and Hugging Face Incident Was an Agent Boundary Failure

The OpenAI and Hugging Face Incident Was an Agent Boundary Failure

4
Comments 5
4 min read
Scaling Vibe Coding: Why 10 Developers Need One Scanner

Scaling Vibe Coding: Why 10 Developers Need One Scanner

Comments 3
5 min read
My GitHub Token Is Valid. My MCP Server Still Gets a 403, and GitHub Never Saw the Request.

My GitHub Token Is Valid. My MCP Server Still Gets a 403, and GitHub Never Saw the Request.

1
Comments 2
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.