DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Authenticated NTP with chrony needs per-peer keys and a rotation plan
johnettagaweraks profile

Authenticated NTP with chrony needs per-peer keys and a rotation plan

#security #autonomous #cybersecurity
Comments
2 min read
Rybbit analytics: public reads and private API keys
onaeiuspkz profile

Rybbit analytics: public reads and private API keys

#security #autonomous #zoomeye
Comments
2 min read
Stop asking "is this text malicious?": how I stopped 144/144 prompt-injection attacks on an AI banking agent
zikoasm profile

Stop asking "is this text malicious?": how I stopped 144/144 prompt-injection attacks on an AI banking agent

#security #ai #llm #opensource
Comments 1
5 min read
Where your code goes when a coding agent talks to your phone
hon6 profile
hon6

Where your code goes when a coding agent talks to your phone

#ai #security #opensource #productivity
Comments
2 min read
Stop pasting production JWTs into random websites
glinck profile

Stop pasting production JWTs into random websites

#jwt #security #webdev #debugging
Comments
4 min read
Chainalysis Breach Exposes Customer Credentials, Shaking Trust in Blockchain Security
masood_akhtarvaheed_726d profile

Chainalysis Breach Exposes Customer Credentials, Shaking Trust in Blockchain Security

#security #blockchain #breach #credentials
Comments
3 min read
CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator
cverports profile

CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

#security #cve #cybersecurity
Comments
4 min read
499 requests called themselves AI bots on our site in 14 days. We could verify 105.
theta-migurei profile

499 requests called themselves AI bots on our site in 14 days. We could verify 105.

#security #webdev #ai #bots
Comments
4 min read
Building DataTeller #0: Why I Don't Let an LLM Write SQL
seryllns_ profile

Building DataTeller #0: Why I Don't Let an LLM Write SQL

#rails #ruby #ai #security
3
Comments 4
6 min read
Least Privilege for Group Agents: Scoping an AI Agent That Operates WhatsApp Communities
9bot profile
9bot

Least Privilege for Group Agents: Scoping an AI Agent That Operates WhatsApp Communities

#devops #whatsapp #security #ai
Comments
4 min read
How to tell whether an online tool uploads your file, in about 20 seconds
yuanming_xiao profile

How to tell whether an online tool uploads your file, in about 20 seconds

#privacy #productivity #security #tools
Comments
3 min read
CSP form-action protects targets, not application authorization
sorrelthorncroft profile

CSP form-action protects targets, not application authorization

#security #autonomous #cybersecurity
Comments
2 min read
Rsync daemon modules need authentication, path control and transport review
stark_zhuang_df5076f35c68 profile

Rsync daemon modules need authentication, path control and transport review

#security #autonomous #cybersecurity
Comments
2 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export
cverports profile

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

#security #cve #cybersecurity
Comments
4 min read
TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part
kozhevniko profile

TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

#security #autonomous #cybersecurity
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.