DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A bot fleet rewrote its headers three times in 48 hours, so I stopped matching signatures

A bot fleet rewrote its headers three times in 48 hours, so I stopped matching signatures

Comments
4 min read
Four problems you inherit the moment your SQL client runs on a server

Four problems you inherit the moment your SQL client runs on a server

Comments
6 min read
ChaosCypher v0.4.2: The Streaming Bug That Only Showed Up When the Chat Was Working

ChaosCypher v0.4.2: The Streaming Bug That Only Showed Up When the Chat Was Working

Comments
7 min read
I scanned 37 security job posts tonight. Zero were posted in the last 24 hours.

I scanned 37 security job posts tonight. Zero were posted in the last 24 hours.

Comments
2 min read
StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

1
Comments
8 min read
HTB - Responder

HTB - Responder

Comments
5 min read
HTB - Funnel

HTB - Funnel

Comments
3 min read
MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

1
Comments
6 min read
BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

1
Comments
6 min read
ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

1
Comments
6 min read
I Put a Database on the Public Internet. My Flow Logs Knew Before I Did.

I Put a Database on the Public Internet. My Flow Logs Knew Before I Did.

Comments
5 min read
SPIFFE Workload Identity for AI Agents, End to End

SPIFFE Workload Identity for AI Agents, End to End

Comments 3
9 min read
From Backend to Breach-Aware Part 0: The Router That Was Built

From Backend to Breach-Aware Part 0: The Router That Was Built

Comments
4 min read
MCP Agent Identity: One Spec Shipped, Three Still Open

MCP Agent Identity: One Spec Shipped, Three Still Open

Comments
7 min read
kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.