DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
499 requests called themselves AI bots on our site in 14 days. We could verify 105.

499 requests called themselves AI bots on our site in 14 days. We could verify 105.

Comments
4 min read
Least Privilege for Group Agents: Scoping an AI Agent That Operates WhatsApp Communities

Least Privilege for Group Agents: Scoping an AI Agent That Operates WhatsApp Communities

Comments
4 min read
CSP form-action protects targets, not application authorization

CSP form-action protects targets, not application authorization

Comments
2 min read
How to tell whether an online tool uploads your file, in about 20 seconds

How to tell whether an online tool uploads your file, in about 20 seconds

Comments
3 min read
Rsync daemon modules need authentication, path control and transport review

Rsync daemon modules need authentication, path control and transport review

Comments
2 min read
Is My Cheap 128 GB SD Card Fake? How to Test a Memory Card Before It Goes in an Offline Phone Security Camera

Is My Cheap 128 GB SD Card Fake? How to Test a Memory Card Before It Goes in an Offline Phone Security Camera

Comments
8 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

Comments
4 min read
When AI finds the bug first: what PHP2Shell tells AI safety programmes

When AI finds the bug first: what PHP2Shell tells AI safety programmes

Comments 1
4 min read
TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

Comments
2 min read
Keycloak CVE-2026-117691: How a SAML Signature Bypass Skips Authentication

Keycloak CVE-2026-117691: How a SAML Signature Bypass Skips Authentication

Comments
3 min read
Seven Security Checks Before Extraction with ZipFlow

Seven Security Checks Before Extraction with ZipFlow

Comments
1 min read
Detecting and Patching Log4j (Log4Shell): A Practical Playbook

Detecting and Patching Log4j (Log4Shell): A Practical Playbook

Comments
2 min read
Network Block Device exposure puts storage access before application login

Network Block Device exposure puts storage access before application login

Comments
2 min read
Securing Multi-Tenant Kubernetes on AWS: mTLS, Network Policies, and Real Isolation

Securing Multi-Tenant Kubernetes on AWS: mTLS, Network Policies, and Real Isolation

Comments
3 min read
PHP2Shell and PHP 8.2 End of Life: What to Do With Your Client WordPress Sites Before 2027

PHP2Shell and PHP 8.2 End of Life: What to Do With Your Client WordPress Sites Before 2027

Comments 1
12 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.