DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
My security test was green for six weeks because it could not turn red

My security test was green for six weeks because it could not turn red

Comments
3 min read
El parche que pospones es la puerta que dejas abierta

El parche que pospones es la puerta que dejas abierta

Comments
1 min read
How to run internal phishing simulations for your organization (free & self-hosted)

How to run internal phishing simulations for your organization (free & self-hosted)

Comments
4 min read
A hash-based CSP has no room for a syntax highlighter

A hash-based CSP has no room for a syntax highlighter

Comments
5 min read
Building Your Own Sovereign CVE Watch: An OpenCVE Field Report

Building Your Own Sovereign CVE Watch: An OpenCVE Field Report

Comments
5 min read
Harvest Now, Decrypt Later: Why Post-Quantum Cryptography Can't Wait

Harvest Now, Decrypt Later: Why Post-Quantum Cryptography Can't Wait

Comments
6 min read
NIS2 Isn't Compliance Theatre—It's a Liability Shift

NIS2 Isn't Compliance Theatre—It's a Liability Shift

Comments
7 min read
AI in the SOC: The Seductive Trap of Automation Without Thinking

AI in the SOC: The Seductive Trap of Automation Without Thinking

Comments
7 min read
Die meisten Sicherheitsvorfälle sind langweilig

Die meisten Sicherheitsvorfälle sind langweilig

Comments
1 min read
OWASP Mobile Top 10 — M5: Insecure Communication

OWASP Mobile Top 10 — M5: Insecure Communication

Comments
17 min read
How I Found a postMessage Origin Bypass in an OAuth SDK

How I Found a postMessage Origin Bypass in an OAuth SDK

10
Comments 5
5 min read
Your .mcp.json probably has a live API key in it

Your .mcp.json probably has a live API key in it

2
Comments 1
3 min read
Your URL fetcher is probably an SSRF vulnerability

Your URL fetcher is probably an SSRF vulnerability

Comments
6 min read
Why SAST and DAST Aren't Enough for Secrets Security

Why SAST and DAST Aren't Enough for Secrets Security

Comments
10 min read
We tested 20 community-recommended DSH plugins — 7 made our shelf. Here's why we rejected the rest.

We tested 20 community-recommended DSH plugins — 7 made our shelf. Here's why we rejected the rest.

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.