DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

Splitting the lethal trifecta fixes it

Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

16
Comments 14
15 min read
Codex Was Torching Your SSD and Nobody Noticed for Months

Codex Was Torching Your SSD and Nobody Noticed for Months

11
Comments 1
10 min read
Your LoRa Board Can Track Airliners at 150 Nautical Miles

Your LoRa Board Can Track Airliners at 150 Nautical Miles

1
Comments
9 min read
Zero-Trust Reverse Proxy Hardening in Nginx: Rate Limiting, Request Smuggling Guards & mTLS

Zero-Trust Reverse Proxy Hardening in Nginx: Rate Limiting, Request Smuggling Guards & mTLS

1
Comments 2
9 min read
DevSecOps Pipeline from Scratch: Gates That Block Bad Code

DevSecOps Pipeline from Scratch: Gates That Block Bad Code

1
Comments
11 min read
The 'Mythos Leak' on Hugging Face Matches Seeded Noise. Its Loader Wants trust_remote_code

The 'Mythos Leak' on Hugging Face Matches Seeded Noise. Its Loader Wants trust_remote_code

Comments
7 min read
How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

5
Comments 3
4 min read
What an encrypted SIM actually protects (and what it doesn't): a threat-model checklist

What an encrypted SIM actually protects (and what it doesn't): a threat-model checklist

Comments
5 min read
SAST vs DAST vs IAST: Integrating All Three in a DevSecOps Pipeline

SAST vs DAST vs IAST: Integrating All Three in a DevSecOps Pipeline

Comments
5 min read
Letting an AI agent query your production database? Do these 6 things first

Letting an AI agent query your production database? Do these 6 things first

Comments
5 min read
Podman Checkpoint CVE: How a Sandbox Bypass Works

Podman Checkpoint CVE: How a Sandbox Bypass Works

Comments
6 min read
A Practical Taxonomy of Prompt Injection: 11 Techniques and What Stops Each One

A Practical Taxonomy of Prompt Injection: 11 Techniques and What Stops Each One

Comments
5 min read
Cell Towers Are Optional: At 16, I Built a Hybrid 800m Off-Grid Mesh Protocol for Smartphones (No LoRa Required)

Cell Towers Are Optional: At 16, I Built a Hybrid 800m Off-Grid Mesh Protocol for Smartphones (No LoRa Required)

Comments
5 min read
My SSL expiry checker was six weeks off on github.com

My SSL expiry checker was six weeks off on github.com

Comments
5 min read
API traffic monitoring: what to track, and how to set it up for a Node API

API traffic monitoring: what to track, and how to set it up for a Node API

Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.