DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Planted One Bad Instruction in Three Places in a Repo. Copilot Read Them All. It Never Bit.

I Planted One Bad Instruction in Three Places in a Repo. Copilot Read Them All. It Never Bit.

1
Comments 8
8 min read
Proving a human approved your AI agent's action: what the replies said

Proving a human approved your AI agent's action: what the replies said

Comments 1
4 min read
Why Kali Linux Won't Make You a Hacker (The 4 Skills You Need First)

Why Kali Linux Won't Make You a Hacker (The 4 Skills You Need First)

Comments 1
6 min read
[REDACTED] doesn't mean deleted

[REDACTED] doesn't mean deleted

Comments 3
5 min read
The First 72 Hours After a Data Breach Goes Public: Legal Clocks, Press, Search Results and Reviews

The First 72 Hours After a Data Breach Goes Public: Legal Clocks, Press, Search Results and Reviews

Comments
11 min read
How I Read a Download Page Before I Trust a Binary

How I Read a Download Page Before I Trust a Binary

Comments
6 min read
How to generate an SBOM for an iOS app (CocoaPods and Swift Package Manager)

How to generate an SBOM for an iOS app (CocoaPods and Swift Package Manager)

Comments
6 min read
Your Vendor Was Breached and Your Customers Blame You: Who Notifies Whom, and What Blackbaud Teaches

Your Vendor Was Breached and Your Customers Blame You: Who Notifies Whom, and What Blackbaud Teaches

Comments
10 min read
How I check a WordPress site for hidden casino spam (5-minute checklist)

How I check a WordPress site for hidden casino spam (5-minute checklist)

Comments
2 min read
Did That Request Really Come from Your iOS App? A Practical Guide to Apple App Attest

Did That Request Really Come from Your iOS App? A Practical Guide to Apple App Attest

Comments
13 min read
There's no Linux download button. There is a Linux build. Here's how I checked.

There's no Linux download button. There is a Linux build. Here's how I checked.

Comments
4 min read
Letting an AI agent say "yes" safely: a two-step accept for MCP tools

Letting an AI agent say "yes" safely: a two-step accept for MCP tools

Comments
3 min read
A Screen-Privacy Tool Should Not Upload the Page It Protects

A Screen-Privacy Tool Should Not Upload the Page It Protects

Comments
3 min read
Your agent rotated the leaked token. It never saw the new one.

Your agent rotated the leaked token. It never saw the new one.

Comments
5 min read
Session Lifecycle Hardening: Rotation, Timeouts & Server-Side Revocation

Session Lifecycle Hardening: Rotation, Timeouts & Server-Side Revocation

Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.