Dev.to Security

GhostApproval: AI Coding Assistants as Lateral Movement Vectors

Originally published on satyamrastogi.com GhostApproval demonstrates how AI coding assistants can …

Do Affiliate Links Still Land Where You Think They Do?

A link can be up and still be wrong. That is especially true for affiliate links. Most teams think…

Putting the agent governance model into production

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

Monitor risky agents and keep agent governance current

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

Maintain sponsor continuity with lifecycle workflows

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

Use access packages for governed agent access

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

Design Conditional Access policies for agent identities

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

GHSA-86VW-X4WW-X467: CVE-2026-56382: Remote Code Execution in Craft CMS via Yii2 Event Handler Injection

CVE-2026-56382: Remote Code Execution in Craft CMS via Yii2 Event Handler Injection Vulnerability…

Establish owners, sponsors, and accountability for AI agents

This article is part of a multi-part series on Microsoft Entra Agent ID governance. For the full seq…

Strengthening Identity Security with Conditional Access Policies in Microsoft Entra ID

Introduction As organizations embrace cloud-first environments, protecting user identities require…

AI Models Face More Than Traditional Cyber Threats

As organizations deploy proprietary AI models, protecting them has become just as important as impro…

Building Guardrails for Enterprise LLMs That Actually Work

The term "guardrails" gets used loosely in conversations about enterprise AI safety. Some people mea…