DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
ScopeMap: planning least-privilege permissions for AI agents

ScopeMap: planning least-privilege permissions for AI agents

Comments
2 min read
CVE-2026-116577: CVE-2026-116577: Algorithmic Complexity Denial of Service in Tornado HTTP Header Parser

CVE-2026-116577: CVE-2026-116577: Algorithmic Complexity Denial of Service in Tornado HTTP Header Parser

Comments
4 min read
I tested my agent sandbox next to a prompt-injection guardrail and found a way around its approvals

I tested my agent sandbox next to a prompt-injection guardrail and found a way around its approvals

Comments
3 min read
I disappeared for 5 months to build a security scanner. Here is what I learned (and how you can break it).

I disappeared for 5 months to build a security scanner. Here is what I learned (and how you can break it).

Comments
2 min read
# Generative AI Is Creating New IP Risks for Indian Employers

# Generative AI Is Creating New IP Risks for Indian Employers

Comments
6 min read
Encrypting Sensitive Data in Spring Boot: AES-256-GCM Explained with a Real-World Example

Encrypting Sensitive Data in Spring Boot: AES-256-GCM Explained with a Real-World Example

Comments
8 min read
Silent Train: Volt Typhoon's Relay Chains and Disposable SSH Infrastructure

Silent Train: Volt Typhoon's Relay Chains and Disposable SSH Infrastructure

2
Comments
7 min read
VITI Special Report: Why Your Million-Dollar ITSM Tool is Just a Dumb UI (And How BIGF Tames Them All)

VITI Special Report: Why Your Million-Dollar ITSM Tool is Just a Dumb UI (And How BIGF Tames Them All)

1
Comments
3 min read
Treat a file input accept attribute as a chooser hint

Treat a file input accept attribute as a chooser hint

Comments
1 min read
After the Drupal Gin Patch: Preventing CVE-2026-110738 Regressions

After the Drupal Gin Patch: Preventing CVE-2026-110738 Regressions

Comments
2 min read
EU Launches First AI Act Probes: OpenAI & Anthropic Face Formal Investigation

EU Launches First AI Act Probes: OpenAI & Anthropic Face Formal Investigation

Comments
3 min read
The LiteLLM incident check you shouldn't run with Python — and the scanner I built for it

The LiteLLM incident check you shouldn't run with Python — and the scanner I built for it

Comments
3 min read
A better spec won't stop a coding agent from deploying to prod

A better spec won't stop a coding agent from deploying to prod

Comments
2 min read
Shared agent memory needs a permission check on every read

Shared agent memory needs a permission check on every read

Comments
2 min read
# ABLITERAX — Delivery

# ABLITERAX — Delivery

Comments
21 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.