close

DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
What unshare -n leaves behind: building a boundary for an AI recon agent

How local Unix sockets bypass network namespaces

What unshare -n leaves behind: building a boundary for an AI recon agent

BERJAYA BERJAYA BERJAYA 12
Comments 17
10 min read
Prompt injection isn't a prompt problem. It's an authorization problem.

Shifts focus from prompts to tool permissions

Prompt injection isn't a prompt problem. It's an authorization problem.

BERJAYA BERJAYA 17
Comments 13
4 min read
I ran 125 prompt-injection attacks on my AI agent. None got through, and that wasn't the interesting part

I ran 125 prompt-injection attacks on my AI agent. None got through, and that wasn't the interesting part

BERJAYA BERJAYA 4
Comments 23
6 min read
When to Skip Your Gem Cooldown

When to Skip Your Gem Cooldown

BERJAYA 3
Comments
7 min read
Authentication and Authorization: What's New in .NET 11

Authentication and Authorization: What's New in .NET 11

Comments
6 min read
A rewrite deleted the guardrail: what the Grok wallet drain says about agent permissions

A rewrite deleted the guardrail: what the Grok wallet drain says about agent permissions

BERJAYA 1
Comments 1
5 min read
Hybrid signatures have a trap: one valid half is not enough

Hybrid signatures have a trap: one valid half is not enough

Comments
4 min read
Per-agent tokens for MCP servers: what operators told me, and the design that came out of it

Per-agent tokens for MCP servers: what operators told me, and the design that came out of it

BERJAYA BERJAYA BERJAYA 8
Comments 10
3 min read
The lobster and the microVM

The lobster and the microVM

Comments
7 min read
Car hacking through identity servers: what the research proves

Car hacking through identity servers: what the research proves

BERJAYA 1
Comments
8 min read
AI-hallucinated packages, Nov 2–8, 2026: 180 new names

AI-hallucinated packages, Nov 2–8, 2026: 180 new names

Comments
2 min read
IPv4 Prefix Due Diligence—And Why a Free /48 Is the Low-Risk Way to Practise BGP

IPv4 Prefix Due Diligence—And Why a Free /48 Is the Low-Risk Way to Practise BGP

Comments
5 min read
Which sites is this email registered on? A silent lookup you can call from code

Which sites is this email registered on? A silent lookup you can call from code

Comments
2 min read
Aruba CX AOS-CX Hardening: A Practical Baseline

Aruba CX AOS-CX Hardening: A Practical Baseline

Comments
5 min read
Hacked Freezers: Two Attack Waves on Europe's Cold Chain Compared

Hacked Freezers: Two Attack Waves on Europe's Cold Chain Compared

Comments
9 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.