Sponsored Content

DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Sessions vs JWTs: you are choosing how often you pay for state

Sessions vs JWTs: you are choosing how often you pay for state

10
Comments 2
8 min read
I Followed the Appeal Path. There Was No Appeal.

I Followed the Appeal Path. There Was No Appeal.

2
Comments 1
11 min read
What a Hash Chain Can't Prove

What a Hash Chain Can't Prove

Comments 4
3 min read
Two AWS IAM privesc tools, one path finder

Two AWS IAM privesc tools, one path finder

Comments
7 min read
RAG security: the retrieved document is now your attack surface

RAG security: the retrieved document is now your attack surface

1
Comments 1
3 min read
Foundry IQ Auth, Explained: Managed Identity, OBO, and Everything Between

Foundry IQ Auth, Explained: Managed Identity, OBO, and Everything Between

Comments
14 min read
Hands-On SIEM Detection: Building, Breaking, and Auditing a Wazuh Lab Environment

Hands-On SIEM Detection: Building, Breaking, and Auditing a Wazuh Lab Environment

Comments
7 min read
Scoped Permissions vs Custody: Letting Software Act On-Chain Without Holding Your Keys

Scoped Permissions vs Custody: Letting Software Act On-Chain Without Holding Your Keys

Comments
4 min read
Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Comments 1
6 min read
Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Comments 1
5 min read
Auth for your MCP server, without running an authorization server

Auth for your MCP server, without running an authorization server

Comments 2
4 min read
Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Comments
6 min read
TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

Comments
6 min read
GrapheneOS vs Stock Android: Privacy, Security and Control

GrapheneOS vs Stock Android: Privacy, Security and Control

Comments
7 min read
Moving a password to another device without syncing your vault

Moving a password to another device without syncing your vault

5
Comments 4
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.