DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Stopped Trusting AI Agents With Tools. So I Built a Gatekeeper.

83 real agents tested zero mocks

I Stopped Trusting AI Agents With Tools. So I Built a Gatekeeper.

25
Comments 21
13 min read
Breach monitoring from cron: no API key, no signup, just curl and jq

Breach monitoring from cron: no API key, no signup, just curl and jq

Comments
3 min read
They Matched The Slogan. The Decision Lived In The Undefined Word

They Matched The Slogan. The Decision Lived In The Undefined Word

10
Comments
20 min read
Stale Price Bug: Why Your Stop-Loss Might Not Protect You

Stale Price Bug: Why Your Stop-Loss Might Not Protect You

Comments
4 min read
My Publish Script Checks for Duplicates Before It Posts. Nothing Stops Two Checks From Passing at Once.

My Publish Script Checks for Duplicates Before It Posts. Nothing Stops Two Checks From Passing at Once.

Comments
5 min read
The Safety Net That Isn't There

The Safety Net That Isn't There

Comments
5 min read
My claude -p Call Has a --safe-mode Flag for Isolation. It Never Isolated the Two API Keys Sitting Right Next To It.

My claude -p Call Has a --safe-mode Flag for Isolation. It Never Isolated the Two API Keys Sitting Right Next To It.

Comments
5 min read
Zero-Trust SSH Access Blueprint: FIDO2 Hardware Keys & SSH Certificate Authority

Zero-Trust SSH Access Blueprint: FIDO2 Hardware Keys & SSH Certificate Authority

Comments
4 min read
Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

Comments
6 min read
VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

Comments
5 min read
Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

Comments
6 min read
JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

Comments
5 min read
Payment system security: protecting money, keys, and trust

Payment system security: protecting money, keys, and trust

Comments
3 min read
The Hacker's Toolbox: 16 Cyber Attack Tools and the Warning Signs to Watch For

The Hacker's Toolbox: 16 Cyber Attack Tools and the Warning Signs to Watch For

Comments
14 min read
Building DeviceTrust: A Practical Approach to Android Fraud Signals

Building DeviceTrust: A Practical Approach to Android Fraud Signals

Comments 1
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.