DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Top AI Security Risks Every Developer Should Understand in 2026

Top AI Security Risks Every Developer Should Understand in 2026

Comments
2 min read
AI Data Privacy: A Three-Layer Defense for Using AI Without Leaking Secrets

AI Data Privacy: A Three-Layer Defense for Using AI Without Leaking Secrets

Comments
4 min read
CBC Bit Flipping Explained: Why Encryption Alone Doesn't Guarantee Integrity

CBC Bit Flipping Explained: Why Encryption Alone Doesn't Guarantee Integrity

1
Comments
3 min read
Cloudflare Tunnel Advanced Guide: Docker, Zero Trust and HA Setup

Cloudflare Tunnel Advanced Guide: Docker, Zero Trust and HA Setup

Comments
6 min read
I added a Claude Code command that runs an OWASP security audit on any file before I ship it

I added a Claude Code command that runs an OWASP security audit on any file before I ship it

Comments
1 min read
X Just Shipped an MCP Server. It Exposes 131 Tools With Zero Access Control.

X Just Shipped an MCP Server. It Exposes 131 Tools With Zero Access Control.

Comments
4 min read
Tool-Result Injection: The MCP Attack System Prompts Miss

Tool-Result Injection: The MCP Attack System Prompts Miss

Comments
7 min read
Microsoft's Agent Governance Toolkit: 9 Packages, MCP-Blind

Microsoft's Agent Governance Toolkit: 9 Packages, MCP-Blind

Comments
5 min read
Why Prompt Guardrails Fail for AI Agent Safety (And What Works Instead)

Why Prompt Guardrails Fail for AI Agent Safety (And What Works Instead)

Comments
7 min read
I was tired of studying security tools from static cheatsheets, so I built ShellStack

Custom builders for 280+ tools

I was tired of studying security tools from static cheatsheets, so I built ShellStack

7
Comments 9
3 min read
Disposable Email vs Real Email vs Aliases: Which Should You Use?

Disposable Email vs Real Email vs Aliases: Which Should You Use?

Comments
5 min read
RLS recursion infinite loop: why I gave up policies and bet everything on a JWT custom claims hook

RLS recursion infinite loop: why I gave up policies and bet everything on a JWT custom claims hook

Comments 2
5 min read
Two ways to reuse a privileged CI token (and my rule only caught one)

Two ways to reuse a privileged CI token (and my rule only caught one)

1
Comments 2
5 min read
Reconstructing cloud identity intrusions from O365 and CloudTrail logs

Reconstructing cloud identity intrusions from O365 and CloudTrail logs

2
Comments
7 min read
How to Check Supabase Row Level Security Holes (Free SQL Audit)

How to Check Supabase Row Level Security Holes (Free SQL Audit)

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.