DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

Coined by Python's Seth Larson in 2025

Slopsquatting: The Supply Chain Attack That Weaponizes AI Hallucinations

76
Comments 44
11 min read
Passkeys Explained Simply

Comments warn account recovery is the weak link

Passkeys Explained Simply

65
Comments 25
6 min read
What Replacing Calendly Taught Me About Trusting Open Source

Sparked by SaaS limits and privacy shifts

What Replacing Calendly Taught Me About Trusting Open Source

23
Comments 9
11 min read
Patch Your Rails: Active Storage CVE-2026-66066

Patch Your Rails: Active Storage CVE-2026-66066

7
Comments
2 min read
When Did AI Become the New Toy? I Just Got Here.

When Did AI Become the New Toy? I Just Got Here.

Comments 2
4 min read
TLS Certificate Management Without Tears

TLS Certificate Management Without Tears

Comments 1
2 min read
ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

Comments
6 min read
OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

Comments
7 min read
Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

Comments
6 min read
VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

Comments
6 min read
How to Audit Your MCP Servers for Security Risks

How to Audit Your MCP Servers for Security Risks

Comments
7 min read
The hidden problem with enterprise AI adoption: you lose control of your own data

The hidden problem with enterprise AI adoption: you lose control of your own data

Comments
3 min read
Before Grok Build Uploads Your Repo, Show the Outbound Receipt

Before Grok Build Uploads Your Repo, Show the Outbound Receipt

Comments 1
4 min read
Event-Driven AWS Security Automation: Real-Time Detection and Remediation with Terraform and Pulumi

Event-Driven AWS Security Automation: Real-Time Detection and Remediation with Terraform and Pulumi

Comments
4 min read
Why Cosine Similarity Fails to Catch Confusable MCP Tools

Why Cosine Similarity Fails to Catch Confusable MCP Tools

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.