AWS Security LIVE!

Daniel Balcarek

WebMCP Attack Lab: Can an E-Shop Hijack Your AI Agent?

#ai #webmcp #angular

Nov 5

𝗝𝗼𝗵𝗻

One Markdown File Can Hijack Your AI Coding Agent: The Hidden Cost of Blindly Trusting AGENTS.md

#ai #webdev #programming

Nov 5

Ayoub Hammoudi

"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

#security #discuss #webdev

Nov 4

Sam LABBE

Claude Code was mailing your email address to every website it visited: the User-Agent leak, the 5-month system-prompt issue, and the 5-point check

#security #ai #privacy

Nov 6

Vicente G. Reyes

A Facebook Reel Made Me Audit My Job Board. It Found a $29 Product for One Cent.

#security #python #django

Nov 6

HS Solution

One forged header switched off our per-IP rate limit

#security #node #nginx

Nov 6

Vinicius Pereira

Three 'clients' sent me malware in two days. Binance lost $6.34 billion to the same trick.

#security #opensource #python

Nov 6

Kateryna Ivashchenko

I built a security-report desk that keeps vulnerabilities under embargo, and the chat platform enforces it

#showdev #opensource #security

Nov 6

oleg-vdv

My SOC triage model had 0 false escalations. On real alerts it had 39 out of 100.

#security #machinelearning #opensource

Nov 6

Gabriel Anhaia

Go 1.27 Adds crypto/mldsa. A Post-Quantum Signature Is 3,309 Bytes; Ed25519's Is 64

#go #security #cryptography

Nov 6

Honey Kiran

Your Yes Is the Weakest Gate

#ai #devops #sre

Nov 6

Enjoy Kumawat

"A Repo Description Field Flows Straight From GitHub Into My Agent's Context, Unlabeled"

#security #mcp #python

Nov 6

CodeWithRomi

UEFI Firmware RCE: How to Harden Your Self-Hosted Servers Right Now

#proxmox #security #linux

Nov 6

Victor Okoroafor

Encrypted Is Not Authenticated: What PostgreSQL sslmode Really Checks

#postgres #security #devops

Nov 6

TECHDEV

A one-line password bypass hit Alpine's sshd. I built a 5-condition check that tells you if your images are exposed.

#security #docker #cli

Nov 6