DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
E-signing without accounts: designing signatures that are anonymous but still hold up

E-signing without accounts: designing signatures that are anonymous but still hold up

Comments
4 min read
Environment Variables the Safe Way

Environment Variables the Safe Way

1
Comments 2
3 min read
Your URL-fetching service is an SSRF engine - here's the two-layer guard we shipped

Your URL-fetching service is an SSRF engine - here's the two-layer guard we shipped

Comments
4 min read
Next.js Middleware Auth Bypass: CVE-2025-29927

Next.js Middleware Auth Bypass: CVE-2025-29927

1
Comments
5 min read
Four AI Agent Security Failures in Two Weeks. We Have 10 Million Records Showing the Pattern.

Four AI Agent Security Failures in Two Weeks. We Have 10 Million Records Showing the Pattern.

Comments
7 min read
How I built a lightweight standalone behavioral anti-stealer to protect my Windows environment

How I built a lightweight standalone behavioral anti-stealer to protect my Windows environment

Comments
2 min read
Your GitOps Controller Is Tier Zero: the Argo CD repo-server RCE

Your GitOps Controller Is Tier Zero: the Argo CD repo-server RCE

2
Comments
11 min read
Prompt Injection Is Structural: 16 Checks for Hardening LLM Applications

Prompt Injection Is Structural: 16 Checks for Hardening LLM Applications

Comments
4 min read
I Didn't Build Another File Locker. I Built ATLOCK.

I Didn't Build Another File Locker. I Built ATLOCK.

12
Comments 3
2 min read
Securing SSH on Tailscale: Lessons from Critical Vulnerability TS-2026-009

Securing SSH on Tailscale: Lessons from Critical Vulnerability TS-2026-009

Comments
2 min read
GitHub Copilot Now Prevents Vulnerabilities Before Code Commits

GitHub Copilot Now Prevents Vulnerabilities Before Code Commits

Comments
7 min read
Your API is being enumerated by a client with a perfectly valid token

Your API is being enumerated by a client with a perfectly valid token

Comments 1
5 min read
NH:STA S01E06 Reproducible Builds

NH:STA S01E06 Reproducible Builds

Comments
4 min read
Keep Agent Logs Out of Mobile Cloud Backups on iOS and Android

Keep Agent Logs Out of Mobile Cloud Backups on iOS and Android

Comments
2 min read
Where Should You Store Your JWT?

Where Should You Store Your JWT?

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.