DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Prompt Injection Is the New SQL Injection (and We're Not Ready)

Compares structural flaws to SQLi

Prompt Injection Is the New SQL Injection (and We're Not Ready)

30
Picked as gem Comments 24
7 min read
A new server gets its first unsolicited packet in 3.77 seconds

A new server gets its first unsolicited packet in 3.77 seconds

8
Comments 2
5 min read
My SPF checker said GitHub was at 8 of 10 DNS lookups. The real number is 10.

My SPF checker said GitHub was at 8 of 10 DNS lookups. The real number is 10.

Comments 2
5 min read
Closing the SSRF DNS-Rebinding Hole with a Custom Resolver

Closing the SSRF DNS-Rebinding Hole with a Custom Resolver

Comments 1
4 min read
Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

Comments 1
2 min read
Two Proxies, One Comma, Every Page a 500

Two Proxies, One Comma, Every Page a 500

Comments 1
6 min read
What Is Seccomp? How Does Linux Restrict What a Process Can Ask the Kernel to Do?

What Is Seccomp? How Does Linux Restrict What a Process Can Ask the Kernel to Do?

1
Comments 1
9 min read
'Proxy: true' is not a fraud strategy

'Proxy: true' is not a fraud strategy

Comments 1
3 min read
'No tools listed' should mean deny, not allow-all

'No tools listed' should mean deny, not allow-all

Comments 1
5 min read
If nothing was concatenated, it isn't prompt injection

If nothing was concatenated, it isn't prompt injection

Comments 1
3 min read
CVE-2026-26084: the sandbox appliance that answers questions it should refuse

CVE-2026-26084: the sandbox appliance that answers questions it should refuse

Comments 1
3 min read
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out

Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out

Comments 1
3 min read
CVE-2026-76442 and the Cost of an Unbounded Number in Cisco Secure Email Gateway

CVE-2026-76442 and the Cost of an Unbounded Number in Cisco Secure Email Gateway

Comments 1
3 min read
Supercharging Your Security Audits: My Deep Dive into a Game-Changing AI Skill

Supercharging Your Security Audits: My Deep Dive into a Game-Changing AI Skill

Comments 1
8 min read
Public Exploit Code and No Patch: The D-Link DIR-822A L2TP Flaw in Context

Public Exploit Code and No Patch: The D-Link DIR-822A L2TP Flaw in Context

Comments 1
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.