Dev.to Security

ISO 27001 and Physical Access Control: An IT Manager's Checklist

Why Physical Access Belongs on Your ISO 27001 Checklist When IT managers prepare for an ISO 27001 …

Certified Kubernetes Security Specialist (CKS) Production Guide

Introduction Imagine receiving a high-severity alert at 3:00 AM indicating that a production pod r…

Two-Factor Authentication: 3 Security Differences and a Selection

The other day, while resetting my password on a bank's mobile app, I entered the verification code s…

Outil de Cybersécurité du Jour - Jul 15, 2026

Découvrez les manuels gratuits de CyberMaîtrise sur manuelscyberpro.webnode.fr ! Maîtrisez des outil…

GDPR-Compliant Access Control: What Your Door Logs Must Contain

Why Door Logs Have Become a GDPR Battleground Most organizations think of GDPR compliance in terms…

I Built a Threshold Signer. Then I Forged It.

I built a threshold signature library, audited my own code, and found it was forgeable. So I forged …

PermitLint: audit Claude Code and Codex permissions locally

Permission files for coding agents can look restrictive while still allowing much more than intended…

I red-teamed my own LLM security gateway in four passes. Here's every gap I found.

I build a security gateway for LLM traffic. It sits in front of the model as a transparent OpenAI-co…

How to Secure Your Linux Server in 10 Steps

How to Secure Your Linux Server in 10 Steps Introduction How to Secure Your Linux Serve…

AI Agents Have a Metadata Problem (MCP and A2A Don't Solve It)

MCP and A2A solve interoperability. They let agents find tools, discover each other, and delegate t…

NH:STA S01E06 Reproducible Builds

This post is part of our series on our work for the Sovereign Tech Agency (STA), formerly the Sovere…

I built the first OSS federated threat-intel feed for LLM prompt injection. Here's how it works — and why no one else did.

Every open-source LLM prompt-injection defense tool I've looked at — Lakera, ProtectAI, NeMo Guardra…