DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Can a research review leave a checkable record? Help me break this draft.

Community is poking holes in the review roster

Can a research review leave a checkable record? Help me break this draft.

3
Comments 5
5 min read
Ghost in the Shell: Can a Log File Hijack an AI?

Iterated attacks successfully poison log analysis

Ghost in the Shell: Can a Log File Hijack an AI?

112
Picked as gem Comments 100
5 min read
Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

Splitting the lethal trifecta fixes it

Your AI Agent Trusts Everything It Reads — A Field Guide to Hijacking Claude, GPT, Gemini & Copilot

15
Comments 10
15 min read
困るのは、情報を盗まれることだけではない

困るのは、情報を盗まれることだけではない

Comments
1 min read
How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

5
Comments
4 min read
Stop your AI agent deleting things: human approval for destructive MCP tools

Stop your AI agent deleting things: human approval for destructive MCP tools

6
Comments 44
3 min read
How do AI agents authenticate? (The problem nobody has solved yet)

How do AI agents authenticate? (The problem nobody has solved yet)

2
Comments 12
4 min read
ParticleDB's Jepsen report, Lenovo's fingerprint USB stick, Karpathy's HackerTube and the Linux TCP bug CVE-2026-98432

ParticleDB's Jepsen report, Lenovo's fingerprint USB stick, Karpathy's HackerTube and the Linux TCP bug CVE-2026-98432

1
Comments
7 min read
Composer 2.11's Cooldown in a Laravel App: Safer Updates, Except When the Update Is the Security Fix

Composer 2.11's Cooldown in a Laravel App: Safer Updates, Except When the Update Is the Security Fix

Comments 1
9 min read
ASP.NET Core Authentication & Authorization Explained: What to Use, When, and How to Ship It Safely

ASP.NET Core Authentication & Authorization Explained: What to Use, When, and How to Ship It Safely

Comments
23 min read
Personal data and third-party LLM APIs: a checklist before the first request

Personal data and third-party LLM APIs: a checklist before the first request

Comments
3 min read
Case study: the VIP list nobody updated

Case study: the VIP list nobody updated

Comments
10 min read
Roundcube 1.6.20 and 1.7.5: 20 Fixes, and an Older SQL Injection Now Being Exploited

Roundcube 1.6.20 and 1.7.5: 20 Fixes, and an Older SQL Injection Now Being Exploited

Comments
5 min read
# What Is an AI Sandbox? How AI Agents Safely Run Code

# What Is an AI Sandbox? How AI Agents Safely Run Code

Comments
3 min read
AI agents write almost all my code; a review counts for one exact commit

AI agents write almost all my code; a review counts for one exact commit

Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.