Dev.to Security

The free tool that saved my client from a GDPR fine

True story. A freelance designer I know was compressing client contracts using a popular online PD…

Who Pentests the AI Pentester? Securing AWS Security Agent First

Letting an AI agent attack your app takes minutes to set up. Deciding what it can reach is the hard …

Four consumer tools: ScriptProbe, ListRun, MatchLine and BreachProbe

This issue carries consumer tools for checking package install scripts, directory submissions, resum…

Oracle Manipulation Risk Report: Binance staked ETH

Oracle Manipulation Risk Report: Binance staked ETH Target Protocol: Binance staked ETH (TVL: $933…

CSA STAR for Cloud Providers: Controls, Levels, and Registry Visibility

Cloud security assessments can become difficult to compare when every provider describes its control…

Reading an Ecode certificate: four things to check

Got an Ecode certificate? Here's a quick way to read it. 1. File details Check the file …

CVE-2026-107399: CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize

CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize Vulnerability ID:…

Node.js Rate Limiting Techniques: Protect APIs from Abuse

Rate limiting is one of the simplest ways to protect a Node.js API from accidental overload, abusive…

How to Use AI for Smart Contract Audits in 2026 — 2026-10-09 #6

The landscape of blockchain security has shifted dramatically. In 2026, relying solely on manual cod…

QR-code login can be phished. Here is how we closed the hole

QR-code login looks safe. You scan a code, approve on your phone, and the computer is signed in. No …

Go 1.27.2 Released: Access Release Notes and Resources for Latest Updates

Introduction to Go 1.27.2 Release The Go programming language has just rolled out its latest itera…

Docker just shipped the agent wall I wanted. It's off by default.

If you updated Docker Desktop recently — version 4.63 or later — a new command is already installed …