close

DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

Comments
5 min read
Using an AST to validate AI-generated PostgreSQL before it runs

Using an AST to validate AI-generated PostgreSQL before it runs

Comments
3 min read
GitHub Copilot After 10 Months: Reliable Autocomplete, and a Security Story Our Review Doesn't Cover Yet

GitHub Copilot After 10 Months: Reliable Autocomplete, and a Security Story Our Review Doesn't Cover Yet

Comments
3 min read
Fine-Tuning IBM Granite 4.1 8B for Banking-Specific AI Guardrails

Fine-Tuning IBM Granite 4.1 8B for Banking-Specific AI Guardrails

Comments
5 min read
My API Was Logging People's National Insurance Numbers. I Never Told It To.

My API Was Logging People's National Insurance Numbers. I Never Told It To.

Comments 1
3 min read
The RLS Policy Was Correct. The Write Was Still Wrong.

The RLS Policy Was Correct. The Write Was Still Wrong.

Comments
3 min read
An AI pentest agent that structurally can't hallucinate a vulnerability — and runs offline

An AI pentest agent that structurally can't hallucinate a vulnerability — and runs offline

Comments
3 min read
CVE-2026-19478: GitLab's CVSS 9.4 GraphQL Flaw Was Exploited Within Days — Patch Now

CVE-2026-19478: GitLab's CVSS 9.4 GraphQL Flaw Was Exploited Within Days — Patch Now

Comments
3 min read
The Complete Guide to Password Manager Compliance: GDPR, HIPAA, and SOC 2 Explained

The Complete Guide to Password Manager Compliance: GDPR, HIPAA, and SOC 2 Explained

Comments
5 min read
The Replay Bundle That Remembers What Happened

The Replay Bundle That Remembers What Happened

4
Comments
6 min read
5 Basic Security Principles Every Developer Should Know

5 Basic Security Principles Every Developer Should Know

Comments
3 min read
Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

Comments
6 min read
5 decisões importantes em um SaaS multi-tenant

5 decisões importantes em um SaaS multi-tenant

Comments
3 min read
MAESTRO: threat-modeling AI agents in seven layers

MAESTRO: threat-modeling AI agents in seven layers

2
Comments
3 min read
Your Free AI Platform Trial Is a Trade, Not a Gift: A 5-Gate Decision Framework

Your Free AI Platform Trial Is a Trade, Not a Gift: A 5-Gate Decision Framework

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.