DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
We Chased the 9 People Intercepting Our App's TLS. It Was Google.

We Chased the 9 People Intercepting Our App's TLS. It Was Google.

1
Comments 1
7 min read
Letting admins edit email templates without handing them code execution

Letting admins edit email templates without handing them code execution

Comments
4 min read
xZeroProtect: A Free WordPress Firewall That Also Tells You Who Your Real Visitors Are

xZeroProtect: A Free WordPress Firewall That Also Tells You Who Your Real Visitors Are

Comments
3 min read
2,622 Valid Certificates Exposed: A Google-GitGuardian Study Maps Private Key Leaks to Real-World Risk

2,622 Valid Certificates Exposed: A Google-GitGuardian Study Maps Private Key Leaks to Real-World Risk

1
Comments
5 min read
Hardening Kademlia DHT: The Eclipse Attack That Record Signing Doesn't Stop

S/Kademlia crypto-puzzles and disjoint paths

Hardening Kademlia DHT: The Eclipse Attack That Record Signing Doesn't Stop

20
Comments 5
9 min read
How Reasoning LLMs Can Be Pushed Into “Overthinking” and Why That Matters for AI Security

How Reasoning LLMs Can Be Pushed Into “Overthinking” and Why That Matters for AI Security

1
Comments
5 min read
[Sofi_Log #016] Longevity Protocol: Refactoring Human Uptime via Biohacking

[Sofi_Log #016] Longevity Protocol: Refactoring Human Uptime via Biohacking

Comments
5 min read
The .gitleaks-baseline.json That Suppressed Live Production Secrets

The .gitleaks-baseline.json That Suppressed Live Production Secrets

Comments
5 min read
I was handed a server with no docs and no idea what it was listening on. One command fixed that.

I was handed a server with no docs and no idea what it was listening on. One command fixed that.

Comments
6 min read
How to Read an AI Vendor's Security Documentation Without Getting Misled

How to Read an AI Vendor's Security Documentation Without Getting Misled

Comments
5 min read
How to safely move your DMARC policy from p=none to p=reject

How to safely move your DMARC policy from p=none to p=reject

Comments 2
4 min read
Learn Claude Code: /security-review

Learn Claude Code: /security-review

1
Comments
1 min read
We benchmarked 24 SAST tools on ~700 real vulnerabilities. The 3 best known ones came last

We benchmarked 24 SAST tools on ~700 real vulnerabilities. The 3 best known ones came last

Comments
1 min read
The two scariest parts of autonomous agents — runaway loops and exposed APIs

The two scariest parts of autonomous agents — runaway loops and exposed APIs

2
Comments 4
8 min read
PCI-DSS, ISO 27001, ISO 27701 e ISO 27018: o que cada um cobre e como se relacionam

PCI-DSS, ISO 27001, ISO 27701 e ISO 27018: o que cada um cobre e como se relacionam

Comments
11 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.