Dev.to Security

Shared Phones and Shared Logins: Access Control for Small Teams Running WhatsApp Automation

Disclosure: I co-founded NxFlowAI, an AI automation agency in Mumbai. The patterns below are generic…

Slopsquatting: 1 in 5 AI Code Samples Recommends a Package That Doesn't Exist

Slopsquatting: 1 in 5 AI Code Samples Recommends a Package That Doesn't Exist Typosquatting needed…

Day 21/90: Practice: Multi-cloud deployment

Day 21/90: Practice: Multi-cloud deployment 90 Day Security Infrastructure Challenge I am writing…

Automating OWASP Top 10 Detection with Python and Burp

Automating OWASP Top 10 Detection with Python and Burp Day 21/60 -- Penetration Testing Challenge …

AWS Security Hardening Checklist: The Practical Version

Day 21: AWS Security Hardening Practice Here's the hardening script I run on every new AWS account…

Day 21: Practice: System hardening toolkit

Day 21: Practice: System hardening toolkit This topic matters because it deals with host drift and…

Cross-Chain Bridge Risk Assessment: USDT0

Cross-Chain Bridge Risk Assessment: USDT0 Target Protocol: USDT0 (TVL: $3214.5M) Technic…

Yells at Cloud, Episode 4: The Vulnpocalypse

Listen: YouTube · Spotify · Apple Podcasts Summary PHP is 31, runs most of the web, and …

PHP2Shell (CVE-2026-109618): How to Check if Your PHP Server Is Vulnerable and Patch It

PHP2Shell in short: if your server runs PHP 8.2–8.5, update to 8.2.35, 8.3.36, 8.4.27 or 8.5.12 (or …

An eight-byte buffer and a permanent error: engineering lessons from CVE-2026-111497

An eight-byte buffer and a permanent error: engineering lessons from CVE-2026-111497 The most inte…

Select Object Storage API for Secure Browser Direct Uploads

Short answer: for private e-commerce uploads with expiring download links, let the backend issue a s…

Cohere caught Qwen3.8 trying to upload a probe file to Beijing. I ran the numbers in its report.

Cohere published a report today (October 26) with a claim that is easy to skim past and hard to un-r…