DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Gave My Secret Scanner a Confidence Score — Then Found a Number I Didn't Want to Publish

I Gave My Secret Scanner a Confidence Score — Then Found a Number I Didn't Want to Publish

Comments
10 min read
What 356 public agent prompts taught me about written safeguards

What 356 public agent prompts taught me about written safeguards

1
Comments 2
6 min read
Self-Hosted SSO for 25 Services: Authelia OIDC on Kubernetes

Self-Hosted SSO for 25 Services: Authelia OIDC on Kubernetes

Comments
5 min read
Avoiding the 5 Mistakes Most Tutorials Make When Creating a File Encryption Tool

Avoiding the 5 Mistakes Most Tutorials Make When Creating a File Encryption Tool

Comments
9 min read
I tried to patch a blind spot in my own MCP tool. The patch and a false-positive bug cancel out.

I tried to patch a blind spot in my own MCP tool. The patch and a false-positive bug cancel out.

2
Comments
5 min read
GitLab wires Anthropic's Claude security tooling into its pipeline via MCP

GitLab wires Anthropic's Claude security tooling into its pipeline via MCP

1
Comments 2
3 min read
The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)

The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)

1
Comments 1
6 min read
Eight webhook providers, eight different ways to sign a request

Eight webhook providers, eight different ways to sign a request

Comments 1
6 min read
The 72-hour dependency cooldown is security theater that breaks your builds

The 72-hour dependency cooldown is security theater that breaks your builds

3
Comments 2
3 min read
Building a Dependency Vulnerability Scanner for Python Projects

Building a Dependency Vulnerability Scanner for Python Projects

Comments
6 min read
Building CSRF Double-Submit Cookie Protection in PHP Video Admin Panels

Building CSRF Double-Submit Cookie Protection in PHP Video Admin Panels

Comments
9 min read
What your site tells a stranger before it renders a single pixel

What your site tells a stranger before it renders a single pixel

Comments
4 min read
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

Comments
4 min read
CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

Comments
2 min read
Learning prompt injection by attacking a deliberately vulnerable AI

Learning prompt injection by attacking a deliberately vulnerable AI

Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.