Dev.to Security

Auditing FlapJax's ERC-8004 identity and payout wallet: 5 matches, 1 date mismatch

FlapJax says its ERC-8004 agent (id 364913) is owned by its treasury and that every Receipt Relay pa…

CPCSC for security integrators: what changes

Most integrators file CPCSC under “the client’s problem.” The defense supplier gets certified, the c…

Protocol Upgrade Compatibility Review: Gauntlet

Protocol Upgrade Compatibility Review: Gauntlet Target Protocol: Gauntlet (TVL: $1604.3M) …

[Boost]

Threat Detected: Plot Twist, It’s Tenable …

RTC Room Token Identity Explained — A Practical Logistics Video Guide

Mint a room token on your server when a known logistics user is about to join a specific video call.…

CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module

CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module Progress Software…

Threat Detected: Plot Twist, It’s Tenable

“It's a trusted application. We've been using it for years.” One of the frustrating parts of workin…

When a cert-manager Keystore Runs Behind a Password Change

cert-manager v1.21.2's API reference: "The keystore file will be updated immediately." After a passw…

Node.js Marketplace Verification: 6 Secure SMS OTP Login Flow Lockout and Replay Defenses

Short answer: design a secure SMS OTP login flow by putting rate limiting, retry control, lockout, a…

I almost rebuilt a project for the wrong reason, a 20 minute audit caught it

I have an iPhone-driving rig. An ESP32 board plugs into the phone over USB and plays human, screen t…

Protocol Upgrade Compatibility Review: USDT0

Protocol Upgrade Compatibility Review: USDT0 Target Protocol: USDT0 (TVL: $3110.3M) (L1). …

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability CVE-2026…