DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026
uhltak profile

Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026

#supplychainsecurity #supplychainattacks #softwaredependencies #devsecops
Comments
6 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security #devsecops #appsec #devops
Comments
8 min read
Where does Secure by Design End? A 3D/4D Model
adbc99 profile

Where does Secure by Design End? A 3D/4D Model

#security #devsecops #ai #architecture
Comments
3 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)
c_k_fb750e731394 profile

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

#security #webdev #ai #devsecops
Comments
2 min read
Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go
julesrobineau profile

Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go

#go #ai #security #devsecops
1
Comments
10 min read
Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later
eldor_zufarov_1966 profile

Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later

#devsecops #security #supplychain #cicd
Comments
2 min read
Responding to feedback: runtime trust, CA key rotation, and the canonicalization bug
edison_flores_6d2cd381b13 profile

Responding to feedback: runtime trust, CA key rotation, and the canonicalization bug

#mcp #security #devsecops #ai
1
Comments 3
4 min read
Software Composition Analysis (SCA): The 2026 Complete Guide
florianlenz profile

Software Composition Analysis (SCA): The 2026 Complete Guide

#sdlc #security #devsecops #githubactions
Comments
7 min read
Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers
eldor_zufarov_1966 profile

Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers

#appsec #supplychain #devsecops #ai
Comments
3 min read
Hardcoded Secrets: Why AI Code Fails Your First SOC 2 Audit
c_k_fb750e731394 profile

Hardcoded Secrets: Why AI Code Fails Your First SOC 2 Audit

#security #webdev #ai #devsecops
Comments 1
3 min read
I caught a trojan in my MCP marketplace. Here's the 8-layer defense I built.
edison_flores_6d2cd381b13 profile

I caught a trojan in my MCP marketplace. Here's the 8-layer defense I built.

#security #malware #devsecops #mcp
Comments
4 min read
Cursor Keeps Skipping Rate Limits on Login Routes (CWE-307)
c_k_fb750e731394 profile

Cursor Keeps Skipping Rate Limits on Login Routes (CWE-307)

#security #webdev #ai #devsecops
Comments
3 min read
Inside the Chain: the tj-actions compromise wasn't one incident — it was three
eldor_zufarov_1966 profile

Inside the Chain: the tj-actions compromise wasn't one incident — it was three

#devsecops #security #supplychain #cicd
Comments
2 min read
SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner
c_k_fb750e731394 profile

SafeWeave vs Snyk vs Checkmarx: Cheapest AI Code Scanner

#security #webdev #ai #devsecops
Comments
4 min read
MCP for AWS Security Engineers: Build a Read-Only Security Hub Triage Agent
mike_anderson_d01f52129fb profile

MCP for AWS Security Engineers: Build a Read-Only Security Hub Triage Agent

#aws #cybersecurity #mcp #devsecops
1
Comments
20 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.