DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast
stark_zhuang_df5076f35c68 profile

Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast

#security #vulnerability #mikrotik #routeros
Comments
3 min read
CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack
kozhevniko profile

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack

#security #vulnerability #mikrotik #routeros
Comments
3 min read
I've Been Using XopProtector for a While — Here's What I Found About Compatibility
_02872163a196e011 profile

I've Been Using XopProtector for a While — Here's What I Found About Compatibility

#android #mobile #security #software
Comments
6 min read
MikroTik RouterOS CVE-2026-67277: A Defender's Detection and Response Playbook
jeffreyciend profile

MikroTik RouterOS CVE-2026-67277: A Defender's Detection and Response Playbook

#security #vulnerability #mikrotik #routeros
Comments
4 min read
Building a 19D Kinematic Biometrics Engine for Bot Mitigation in FastAPI
0xstoic_bit profile

Building a 19D Kinematic Biometrics Engine for Bot Mitigation in FastAPI

#cybersecurity #fastapi #python #security
1
Comments
3 min read
Keep Free-Lane Diffs Off the Schema Lock
hackjs_8688 profile

Keep Free-Lane Diffs Off the Schema Lock

#ai #agents #javascript #security
Comments
8 min read
What Is a Confused Deputy? How Can a Trusted Program Be Tricked Into Using Its Own Permissions?
aditya_d_sharma profile

What Is a Confused Deputy? How Can a Trusted Program Be Tricked Into Using Its Own Permissions?

#cybersecurity #infosec #security
1
Comments
5 min read
239,093 NetScaler Deployments in View: Measuring the Citrix Edge After CVE-2026-19490
kozhevniko profile

239,093 NetScaler Deployments in View: Measuring the Citrix Edge After CVE-2026-19490

#security #zoomeye #exposure #netscaler
Comments
4 min read
The Advisory That Was Not a Patch: Reading AA26-231A and the AI-Assisted Reconnaissance of Siemens S7 PLCs
onaeiuspkz profile

The Advisory That Was Not a Patch: Reading AA26-231A and the AI-Assisted Reconnaissance of Siemens S7 PLCs

#security #ics #otsecurity #siemens
Comments
5 min read
When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra
stark_zhuang_df5076f35c68 profile

When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra

#security #authentication #kestra #cve202649869
Comments
4 min read
ProfessorOS
davimaxmillan profile

ProfessorOS

#authentication #backend #programming #security
Comments
3 min read
When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius
bianliang profile

When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius

#security #supplychain #artifactory #authentication
Comments
4 min read
The credential your record names is not the one that made the call
williamchiu profile

The credential your record names is not the one that made the call

#ai #architecture #governance #security
Comments 7
6 min read
BadHost in the AI Stack: What CVE-2026-48710 Means for FastAPI, vLLM and MCP Gateways
bianliang profile

BadHost in the AI Stack: What CVE-2026-48710 Means for FastAPI, vLLM and MCP Gateways

#security #vulnerability #starlette #fastapi
1
Comments
4 min read
CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization
stark_zhuang_df5076f35c68 profile

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization

#security #vulnerability #starlette #fastapi
1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.