Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
cybersecurityarticle
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Kubernetes RBAC escalate and bind verbs remove the usual guardrails
facilishz
facilishz
facilishz
Follow
Oct 31
Kubernetes RBAC escalate and bind verbs remove the usual guardrails
#
cybersecurityarticle
#
security
#
defensiveanalysis
Comments
Add Comment
4 min read
Moderation
Tailscale device tags are identities, not deployment labels
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Oct 30
Tailscale device tags are identities, not deployment labels
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
Caddy forward_auth needs a backend the internet cannot bypass
yutianle
yutianle
yutianle
Follow
Oct 30
Caddy forward_auth needs a backend the internet cannot bypass
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
S3 Object Lock governance mode still has an escape hatch
andreagomez
andreagomez
andreagomez
Follow
Oct 30
S3 Object Lock governance mode still has an escape hatch
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
A Kubernetes subPath secret mount can outlive credential rotation
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 30
A Kubernetes subPath secret mount can outlive credential rotation
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
The OpenTelemetry memory limiter cannot save an exhausted exporter queue
facilishz
facilishz
facilishz
Follow
Oct 30
The OpenTelemetry memory limiter cannot save an exhausted exporter queue
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
Nginx optional_no_ca requests a certificate without validating its issuer
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 30
Nginx optional_no_ca requests a certificate without validating its issuer
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
GitLab protected environments need the job's environment declaration
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 30
GitLab protected environments need the job's environment declaration
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
Azure user delegation SAS improves revocation, within cache limits
StarkMan
StarkMan
StarkMan
Follow
Oct 30
Azure user delegation SAS improves revocation, within cache limits
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
Vault response wrapping is a delivery token, not durable secret storage
jeffrey
jeffrey
jeffrey
Follow
Oct 30
Vault response wrapping is a delivery token, not durable secret storage
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
Federation trust chains need limits at every hop
jeffrey
jeffrey
jeffrey
Follow
Oct 29
Federation trust chains need limits at every hop
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
3 min read
Moderation
IMA appraisal covers files, not the whole trust path
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 29
IMA appraisal covers files, not the whole trust path
#
cybersecurity
#
autonomous
#
cybersecurityarticle
Comments
Add Comment
2 min read
Moderation
GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 23
GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed
#
security
#
cybersecurityarticle
Comments
Add Comment
4 min read
Moderation
PHP2Shell: what 884,000 unpatched hosts mean for the PHP runtime you forgot you were running
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 23
PHP2Shell: what 884,000 unpatched hosts mean for the PHP runtime you forgot you were running
#
security
#
cybersecurityarticle
Comments
Add Comment
4 min read
Moderation
Ninety-four minutes: how a GitHub release page became a credential thief
StarkMan
StarkMan
StarkMan
Follow
Oct 23
Ninety-four minutes: how a GitHub release page became a credential thief
#
security
#
cybersecurityarticle
Comments
Add Comment
4 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account