close

DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Critical One-Click RCE Flaw Exposes VS Code and Cursor Users to Remote Code Execution

Critical One-Click RCE Flaw Exposes VS Code and Cursor Users to Remote Code Execution

Comments
6 min read
A URL Is Only Safe for the Sink That Consumes It

A URL Is Only Safe for the Sink That Consumes It

Comments
4 min read
Finding Exposed Services (and Vulnerabilities) on Your Network: A Practical ScanSearch Guide

Finding Exposed Services (and Vulnerabilities) on Your Network: A Practical ScanSearch Guide

Comments
4 min read
Detecting affiliate self-referrals with Stripe's payment method fingerprint

Detecting affiliate self-referrals with Stripe's payment method fingerprint

Comments
5 min read
Three Silent Failures Between You and Sidecar Injection

Three Silent Failures Between You and Sidecar Injection

Comments
3 min read
Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Comments
7 min read
ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

Comments
8 min read
Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Comments
7 min read
Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Comments
7 min read
TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

Comments
7 min read
Audit Your AI Dev Tool's Data Boundary Before You Paste Real Code Into It

Audit Your AI Dev Tool's Data Boundary Before You Paste Real Code Into It

Comments
5 min read
Security Monitoring for SRE Teams

Security Monitoring for SRE Teams

Comments
2 min read
The Two Layers That Decide Whether Your Agent Survives

The Two Layers That Decide Whether Your Agent Survives

Comments 2
8 min read
Security considerations in IFrame tag

Security considerations in IFrame tag

Comments 1
1 min read
Environment Variables the Safe Way

Environment Variables the Safe Way

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.