DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
TryHackMe Complimentary Write-Up: Exploiting an Over-Permissive AWS Guest Role

TryHackMe Complimentary Write-Up: Exploiting an Over-Permissive AWS Guest Role

Comments
5 min read
NETO: Chat P2P local para devs que valoran su privacidad

NETO: Chat P2P local para devs que valoran su privacidad

Comments
1 min read
When AI Agents Go Off-Script: What OpenAI and Anthropic's Recent Incidents Teach Us About Exposure

When AI Agents Go Off-Script: What OpenAI and Anthropic's Recent Incidents Teach Us About Exposure

Comments 1
6 min read
🚀 Introducing BladeRecon v0.2.1

🚀 Introducing BladeRecon v0.2.1

Comments
1 min read
CSRF - Cross-Site Request Forgery

CSRF - Cross-Site Request Forgery

Comments
5 min read
Attack Surface of Hand-Rolled Auth: Consolidating Keycloak FastAPI Role Based Access Control Across 40 Endpoints

Attack Surface of Hand-Rolled Auth: Consolidating Keycloak FastAPI Role Based Access Control Across 40 Endpoints

Comments
7 min read
Origin Part 22: A Smaller Circuit

Origin Part 22: A Smaller Circuit

Comments
7 min read
Auth0 Token Vault: Letting an Autonomous Agent Call Slack and Google APIs Without Ever Holding the User's Credentials

Auth0 Token Vault: Letting an Autonomous Agent Call Slack and Google APIs Without Ever Holding the User's Credentials

Comments
5 min read
I Built a Free Browser-Only JWT Secret & Key Pair Generator (HMAC + RSA + Ed25519)

I Built a Free Browser-Only JWT Secret & Key Pair Generator (HMAC + RSA + Ed25519)

Comments
3 min read
Por que um Staff Engineer está estudando AI Security

Por que um Staff Engineer está estudando AI Security

1
Comments
4 min read
Cracking WMI-exec in Rust by turning impacket into a byte-level oracle

Cracking WMI-exec in Rust by turning impacket into a byte-level oracle

Comments
1 min read
Why Cursor Installs npm Packages With Known CVEs

Why Cursor Installs npm Packages With Known CVEs

Comments
4 min read
Your AI agent's guardrails don't know what it's allowed to do

Your AI agent's guardrails don't know what it's allowed to do

Comments
5 min read
Killing the long-lived tokens in my CI, one exchange at a time

Killing the long-lived tokens in my CI, one exchange at a time

Comments
7 min read
The eight login forms I deleted

The eight login forms I deleted

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.