DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
WebMCP Attack Lab: Can an E-Shop Hijack Your AI Agent?

Built with Angular 22 and malicious e-shop tools
gramli profile

WebMCP Attack Lab: Can an E-Shop Hijack Your AI Agent?

#ai #webmcp #angular #security
44
Picked as gem Comments 27
8 min read
"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

Spot homoglyph attacks using simple profile checks
ayoub_hammoudi profile

"Mandatory user verification" on DEV is a scam. Here's how to spot it in 30 seconds.

#discuss #security #webdev #beginners
18
Picked as gem Comments 13
1 min read
One Markdown File Can Hijack Your AI Coding Agent: The Hidden Cost of Blindly Trusting AGENTS.md

Downloads folder attacks boast a 90% success rate
johnnylemonny profile

One Markdown File Can Hijack Your AI Coding Agent: The Hidden Cost of Blindly Trusting AGENTS.md

#ai #webdev #programming #security
11
Comments 8
8 min read
Your App Will Meet a Freeze. Design for It
azaleakuts profile
Azalea

Your App Will Meet a Freeze. Design for It

#fintech #security #blockchain #webdev
6
Comments
5 min read
Linux local privilege escalation: OpenAI's 948 reported findings
axrisi profile

Linux local privilege escalation: OpenAI's 948 reported findings

#linux #security #openai #ai
Comments
8 min read
Localhost is not authentication: fixing a CWE-306 webhook in an AI agent framework
ali_ahmed_44ee99051e327ce profile

Localhost is not authentication: fixing a CWE-306 webhook in an AI agent framework

#security #aiagents #opensource #node
Comments
3 min read
Threat-model an agent that can spend or sign
conorbronsdon profile

Threat-model an agent that can spend or sign

#ai #security #agents
Comments
5 min read
Coding Agents Are Growing Memories. If You Can't git diff It, Don't Trust It
gabrielanhaia profile

Coding Agents Are Growing Memories. If You Can't git diff It, Don't Trust It

#discuss #ai #git #security
Comments
9 min read
Before authentication: three bugs in Mullvad's gotatun
zerox80 profile

Before authentication: three bugs in Mullvad's gotatun

#security #rust #wireguard #networking
Comments
3 min read
Claude's IP Allowlist Can 403 a Leaked API Key. It Can 403 Your Weekly Cron Job Too
gabrielanhaia profile

Claude's IP Allowlist Can 403 a Leaked API Key. It Can 403 Your Weekly Cron Job Too

#ai #security #claude #devops
Comments
8 min read
One in five Claude Code skills runs a bundled script. We read what those scripts do
adrian2016 profile

One in five Claude Code skills runs a bundled script. We read what those scripts do

#claude #ai #security #agents
Comments
6 min read
My toxic relationship with Meta's bug bounty program
zerox80 profile

My toxic relationship with Meta's bug bounty program

#security #cpp #quic #bugbounty
Comments
4 min read
Investigating the WinGram Telegram Casino: Uncovering a ClickFix Attack Vector
cyberstories123 profile

Investigating the WinGram Telegram Casino: Uncovering a ClickFix Attack Vector

#cybersecurity #osint #programming #security
10
Comments
3 min read
How we keep AI agent actions under server side control in rails
oleksandr_sainchuk profile

How we keep AI agent actions under server side control in rails

#backend #rails #ruby #security
Comments 1
9 min read
We read 891 public Claude Code mods before installing any. Here is what they can do
adrian2016 profile

We read 891 public Claude Code mods before installing any. Here is what they can do

#claude #ai #security #plugins
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.