Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
infosec
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool
Ahmed Omeiza
Ahmed Omeiza
Ahmed Omeiza
Follow
Oct 18
Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool
#
cybersecurity
#
infosec
#
security
1
 reaction
Comments
Add Comment
3 min read
Golden ticket detection: the forged TGT that never touches the krbtgt password
StarkMan
StarkMan
StarkMan
Follow
Oct 18
Golden ticket detection: the forged TGT that never touches the krbtgt password
#
authentication
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
Windows Attacks & DefenseWindows Attacks & Defense
kaan kurt
kaan kurt
kaan kurt
Follow
Oct 17
Windows Attacks & DefenseWindows Attacks & Defense
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
86 min read
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 17
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
5 min read
Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability
jeffrey
jeffrey
jeffrey
Follow
Oct 17
Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets
andreagomez
andreagomez
andreagomez
Follow
Oct 17
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM
Devaland
Devaland
Devaland
Follow
Oct 17
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM
#
security
#
cybersecurity
#
privacy
#
infosec
Comments
Add Comment
3 min read
Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 17
Stolen ConnectWise Cloud Backup Credential Used to Sign In to 173 Microsoft 365 Tenants
#
cybersecurity
#
infosec
#
security
1
 reaction
Comments
1
 comment
5 min read
Why Human Oversight Still Matters in Automated Cyber Defence Introduction
Survi
Survi
Survi
Follow
Oct 17
Why Human Oversight Still Matters in Automated Cyber Defence Introduction
#
automation
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
6 min read
CVE-2026-93616: Assessing Real Exposure in Check Point Deployments
yutianle
yutianle
yutianle
Follow
Oct 17
CVE-2026-93616: Assessing Real Exposure in Check Point Deployments
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
phpIPAM: 4,238 title matches for the address register that maps a network
StarkMan
StarkMan
StarkMan
Follow
Oct 17
phpIPAM: 4,238 title matches for the address register that maps a network
#
infosec
#
networking
#
php
#
security
Comments
Add Comment
2 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation
Faizan Akhtar
Faizan Akhtar
Faizan Akhtar
Follow
Oct 17
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation
#
cybersecurity
#
cve
#
vulnerability
#
infosec
Comments
Add Comment
6 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation
Faizan Akhtar
Faizan Akhtar
Faizan Akhtar
Follow
Oct 17
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation
#
cybersecurity
#
cve
#
vulnerability
#
infosec
Comments
Add Comment
6 min read
What to answer when the questionnaire asks 'is MFA enforced for all users?'
security answer kit
security answer kit
security answer kit
Follow
Oct 17
What to answer when the questionnaire asks 'is MFA enforced for all users?'
#
authentication
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation
Faizan Akhtar
Faizan Akhtar
Faizan Akhtar
Follow
Oct 17
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation
#
cybersecurity
#
cve
#
vulnerability
#
infosec
Comments
Add Comment
6 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account