DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."

"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."

Comments
5 min read
Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely

Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely

Comments
6 min read
TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

Comments
5 min read
Canary Tests for AI Coding Agents: A Sandbox Harness You Can Run Yourself

Canary Tests for AI Coding Agents: A Sandbox Harness You Can Run Yourself

Comments
4 min read
Sandbox First: A Safer Local Harness for Evaluating Free Coding Models on Your Own Codebase

Sandbox First: A Safer Local Harness for Evaluating Free Coding Models on Your Own Codebase

Comments
6 min read
I Gave My Coding Agent Fake Tools on Purpose: A Boundary-Test Harness You Can Run on a Free Server

I Gave My Coding Agent Fake Tools on Purpose: A Boundary-Test Harness You Can Run on a Free Server

Comments
5 min read
Quarantine Lanes for AI-Generated Patches: A Bash Gate You Can Run for Free

Quarantine Lanes for AI-Generated Patches: A Bash Gate You Can Run for Free

Comments
6 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

Comments
5 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

Comments
5 min read
Cognous Keeps Your AI in Check

Cognous Keeps Your AI in Check

10
Comments
4 min read
Looking for 100 technical testers: SecondGate (WordPress security & passkeys, no cloud dependency)

Looking for 100 technical testers: SecondGate (WordPress security & passkeys, no cloud dependency)

1
Comments 3
2 min read
Instant Payments Risk Management: What Every Fintech Developer Should Know

Instant Payments Risk Management: What Every Fintech Developer Should Know

Comments
4 min read
How to Build a Log Parser That Detects Brute Force Attacks

How to Build a Log Parser That Detects Brute Force Attacks

Comments
5 min read
Authenticated scraping should use sessions, not passwords

Authenticated scraping should use sessions, not passwords

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.