DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor
c_k_fb750e731394 profile

Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

#security #webdev #ai #devsecops
Comments
5 min read
Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It
grumpysage profile

Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

#security #ai #devsecops #governance
Comments
9 min read
The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)
c_k_fb750e731394 profile

The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

#security #webdev #ai #devsecops
Comments 1
9 min read
Turn Trivy SBOM and SARIF output into versioned release evidence
warnowdigitalsolutions profile

Turn Trivy SBOM and SARIF output into versioned release evidence

#github #devsecops #security #githubactions
Comments
2 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)
c_k_fb750e731394 profile

The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)

#security #webdev #ai #devsecops
1
Comments 1
6 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts
kenimo49 profile

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

#security #npm #javascript #devsecops
2
Comments
6 min read
Shift-Left Security Is Dead When Cursor Writes the Code
c_k_fb750e731394 profile

Shift-Left Security Is Dead When Cursor Writes the Code

#security #webdev #ai #devsecops
Comments
5 min read
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026
uhltak profile

Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026

#supplychainsecurity #supplychainattacks #softwaredependencies #devsecops
Comments
6 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security #devsecops #appsec #devops
Comments
8 min read
Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)
c_k_fb750e731394 profile

Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)

#security #webdev #ai #devsecops
1
Comments
4 min read
The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)
c_k_fb750e731394 profile

The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)

#security #webdev #ai #devsecops
1
Comments
7 min read
Where does Secure by Design End? A 3D/4D Model
adbc99 profile

Where does Secure by Design End? A 3D/4D Model

#security #devsecops #ai #architecture
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.