close

DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
WebMCP Attack Lab: Can an E-Shop Hijack Your AI Agent?

Built with Angular 22 and malicious e-shop tools
gramli profile

WebMCP Attack Lab: Can an E-Shop Hijack Your AI Agent?

#ai #webmcp #angular #security
BERJAYA BERJAYA BERJAYA 47
Picked as gem Comments 30
8 min read
"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

Spot homoglyph attacks using simple profile checks
ayoub_hammoudi profile

"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

#discuss #security #webdev #beginners
BERJAYA BERJAYA BERJAYA 18
Picked as gem Comments 13
1 min read
One Markdown File Can Hijack Your AI Coding Agent: The Hidden Cost of Blindly Trusting AGENTS.md

Downloads folder attacks boast a 90% success rate
johnnylemonny profile

One Markdown File Can Hijack Your AI Coding Agent: The Hidden Cost of Blindly Trusting AGENTS.md

#ai #webdev #programming #security
BERJAYA BERJAYA BERJAYA 12
Comments 9
8 min read
Linux local privilege escalation: OpenAI's 948 reported findings
axrisi profile

Linux local privilege escalation: OpenAI's 948 reported findings

#linux #security #openai #ai
Comments
8 min read
Your App Will Meet a Freeze. Design for It
azaleakuts profile
Azalea

Your App Will Meet a Freeze. Design for It

#fintech #security #blockchain #webdev
BERJAYA BERJAYA BERJAYA 6
Comments 1
5 min read
sshole CVE-2026-123158 on Alpine: ssh -V can't tell you if it's patched, so check the package revision and restart sshd
ilan_kim profile

sshole CVE-2026-123158 on Alpine: ssh -V can't tell you if it's patched, so check the package revision and restart sshd

#security #linux #ssh #devops
Comments
15 min read
Why Third-Party Scripts Are Still the Weakest Link in Modern Web Stacks
anne_jacobs_ac166227aa92b profile
AJ

Why Third-Party Scripts Are Still the Weakest Link in Modern Web Stacks

#webdev #security #architecture #javascript
Comments
4 min read
When a Self-Hosted Model Gateway Tripped Trust & Safety
hoelee profile
Hoelee

When a Self-Hosted Model Gateway Tripped Trust & Safety

#ai #devops #security #architecture
BERJAYA 1
Comments
5 min read
What a Claude Code plugin runs before you type: we read 2,688 public plugins
adrian2016 profile

What a Claude Code plugin runs before you type: we read 2,688 public plugins

#claude #security #mcp #ai
BERJAYA 1
Comments
6 min read
Building a free embeddable widget that earns attribution honestly: iframe + credit line design
meetandplay profile

Building a free embeddable widget that earns attribution honestly: iframe + credit line design

#webdev #javascript #security #opensource
Comments 1
4 min read
Before you open Claude Code in a cloned repo, check its .claude/skills folder
adrian2016 profile

Before you open Claude Code in a cloned repo, check its .claude/skills folder

#claude #security #ai #git
Comments
6 min read
Localhost is not authentication: fixing a CWE-306 webhook in an AI agent framework
ali_ahmed_44ee99051e327ce profile

Localhost is not authentication: fixing a CWE-306 webhook in an AI agent framework

#security #aiagents #opensource #node
Comments
3 min read
Overconfidence in LLM Reliability Leads to Root Access Risks: Addressing Security and Compliance Concerns
maricode profile

Overconfidence in LLM Reliability Leads to Root Access Risks: Addressing Security and Compliance Concerns

#security #compliance #llm #rootaccess
Comments
9 min read
Threat-model an agent that can spend or sign
conorbronsdon profile

Threat-model an agent that can spend or sign

#ai #security #agents
Comments
5 min read
Read, return, forget: processing passport scans without storing the image
doccheap profile

Read, return, forget: processing passport scans without storing the image

#privacy #security #gdpr #backend
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.