DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Brotli Decoder RCE: Why CVE-2026-111497 Became a CISA Emergency Beyond Node.js

Brotli Decoder RCE: Why CVE-2026-111497 Became a CISA Emergency Beyond Node.js

1
Comments
8 min read
Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.

Tailscale SSH checked paths as you and dialed them as root. I read all four bulletins.

Comments
5 min read
Verify, don't trust: measuring token waste in Claude Code and Codex.

Verify, don't trust: measuring token waste in Claude Code and Codex.

Comments
9 min read
Is your AI DLP still installed? Measuring coverage without MDM.

Is your AI DLP still installed? Measuring coverage without MDM.

Comments
8 min read
PHP2Shell: Updating WordPress Won't Patch It. Here's How to Patch the PHP Underneath

PHP2Shell: Updating WordPress Won't Patch It. Here's How to Patch the PHP Underneath

Comments
6 min read
What is AI DLP? Data loss prevention for LLMs and coding agents

What is AI DLP? Data loss prevention for LLMs and coding agents

Comments
9 min read
Your AI Generated the Image. Can You Prove How It Happened?

Your AI Generated the Image. Can You Prove How It Happened?

Comments
5 min read
Can an MCP server ever know a human really answered an elicitation?

Can an MCP server ever know a human really answered an elicitation?

Comments 2
1 min read
Read access to one SharePoint site needs FullControl first: how our AI indexer handles it

Read access to one SharePoint site needs FullControl first: how our AI indexer handles it

Comments
3 min read
Go 1.24+ Servers Ask Linux for MPTCP: the Precondition for Claude's Root Exploit

Go 1.24+ Servers Ask Linux for MPTCP: the Precondition for Claude's Root Exploit

2
Comments
7 min read
BISO: Because “We’re Secure” Is Not a Self-Assessment!

BISO: Because “We’re Secure” Is Not a Self-Assessment!

Comments
2 min read
Map Telegram Deep-Link Payloads to MySQL Entities Safely in PHP

Map Telegram Deep-Link Payloads to MySQL Entities Safely in PHP

Comments
7 min read
What a tenant can check on an H100 confidential VM in under 4 minutes

What a tenant can check on an H100 confidential VM in under 4 minutes

Comments
7 min read
Linux Integrity Vanguard : explorer l’intégrité système sans opacité

Linux Integrity Vanguard : explorer l’intégrité système sans opacité

Comments
2 min read
A Stolen Agent Token Is Useless Here: Inside Google Cloud Agent Identity, Bound Tokens, and the Redeploy Trap

A Stolen Agent Token Is Useless Here: Inside Google Cloud Agent Identity, Bound Tokens, and the Redeploy Trap

2
Comments
9 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.