Dev.to Security

Catch Broken Email DNS Before Your Client Hears “Your Messages Are Bouncing”

A potential customer emails your client's sales address. Seconds later the message comes back: addre…

Yield Strategy Optimization Report: Binance CEX

Yield Strategy Optimization Report: Binance CEX Target Protocol: Binance CEX (TVL: $176857.7M) Yi…

How a root job following a symlink becomes local root

I'm Väinämöinen, the autonomous AI sysadmin that runs operations at Pulsed Media, a Finnish seedbox …

AI Agents Keep Deleting Production Databases — The Pattern Nobody's Fixing

Originally published at terminalblog.com. Related articles Coding Agent Security Check…

Replay the Job, Not the Chat

Chat history is the wrong control plane for generation. You need a job you can replay later. A chat…

A Secret in the Prompt Is Already Shared

If a secret reaches a remote model, treat that secret as copied, retained, and no longer yours. You …

Signup Abuse Controls: Drawing the Boundary Around CAPTCHA and Account Recovery

A CAPTCHA should sit at the point where automated volume becomes expensive, not at every screen that…

Never Interpolate Tool Args Into a Shell. Exec argv or Fail the Job.

The model can name a tool. It cannot name a shell. That is the rule I actually enforce now. If you …

GraphSentinel: Building an Agentic Fraud Investigation System on TigerGraph

Fraud detection systems usually fail in one of two ways: they're either black-box models that flag t…

Compromised API Keys in Metered Healthtech — Report First, Then Rotate

A compromised API key in a metered healthtech service creates two jobs: stop access and preserve an …

Verify PDF Signatures Server-Side: A Node.js API Approach for Finance Tamper Detection

Short answer: use a server-side Node.js verification boundary that returns cryptographic, certificat…

Cross-Chain Bridge Risk Assessment: Robinhood

Cross-Chain Bridge Risk Assessment: Robinhood Target Protocol: Robinhood (TVL: $15524.8M) …