DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Prompt Injection Is the New SQL Injection (and We're Not Ready)

Compares structural flaws to SQLi

Prompt Injection Is the New SQL Injection (and We're Not Ready)

37
Picked as gem Comments 33
7 min read
ATLOCK v5: I'm 13. I Had One Laptop. So I Built a Security Suite. 🔐

ATLOCK v5: I'm 13. I Had One Laptop. So I Built a Security Suite. 🔐

7
Comments 2
10 min read
Agent history is unsigned and writable by anyone

Agent history is unsigned and writable by anyone

1
Comments 2
4 min read
Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Two Pre-Authentication RCE Zero-Days Under Active Exploitation

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Two Pre-Authentication RCE Zero-Days Under Active Exploitation

Comments 1
8 min read
I tried to talk Claude out of noticing a compromised PC. Prompt injection wasn't the problem.

I tried to talk Claude out of noticing a compromised PC. Prompt injection wasn't the problem.

Comments
5 min read
Cloudflare Containers: Vulnerability Allowing Reading of Residual Data from Other Tenants via Reused Blocks

Cloudflare Containers: Vulnerability Allowing Reading of Residual Data from Other Tenants via Reused Blocks

Comments
7 min read
Integrating Web Application Firewalls (WAF) with PHP Framework

Integrating Web Application Firewalls (WAF) with PHP Framework

Comments 1
15 min read
How to secure a Spark Java client application with OpenID Connect (OIDC) using pac4j

How to secure a Spark Java client application with OpenID Connect (OIDC) using pac4j

Comments 1
6 min read
How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)

How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)

Comments 1
6 min read
Our health endpoint is public, so it answers with a count instead of a name

Our health endpoint is public, so it answers with a count instead of a name

Comments 1
4 min read
My SPF checker said GitHub was at 8 of 10 DNS lookups. The real number is 10.

My SPF checker said GitHub was at 8 of 10 DNS lookups. The real number is 10.

Comments 2
5 min read
Closing the SSRF DNS-Rebinding Hole with a Custom Resolver

Closing the SSRF DNS-Rebinding Hole with a Custom Resolver

Comments 1
4 min read
Two Proxies, One Comma, Every Page a 500

Two Proxies, One Comma, Every Page a 500

Comments 1
6 min read
Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

Comments 1
2 min read
strypt: remove hidden metadata from your files before you share them

strypt: remove hidden metadata from your files before you share them

Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.