Dev.to Security

Turning an old Android phone into a screen-off security camera (and the tradeoffs)

Turning an old Android phone into a security camera sounds simple until you actually try to leave it…

CVE-2026-70593: CVE-2026-70593: Path Traversal and Arbitrary File Write via Custom Theme Upload in Ghost CMS

CVE-2026-70593: Path Traversal and Arbitrary File Write via Custom Theme Upload in Ghost CMS Vuln…

5 Consejos Avanzados de Ciberseguridad para Usuarios Dedicados

Todos conocemos las reglas básicas de ciberseguridad: actualizar nuestros equipos, tener cuidado con…

Security Monitoring for SRE Teams

Security used to be a separate team. Increasingly, SRE teams are being asked to own the monitoring s…

CVE-2026-70594: CVE-2026-70594: Session Fixation in Ghost Admin Panel

CVE-2026-70594: Session Fixation in Ghost Admin Panel Vulnerability ID: CVE-2026-70594 CVSS Score…

Cursor Google Workspace Plugin Security Checklist

Cursor Google Workspace plugins: connect Gmail, Drive, and Calendar safely Quick answer …

A database answer without provenance is just a confident claim

A fluent database answer can be impossible to review. The number looks plausible, but the response …

Building Reliable Business Account Verification with the WhatsApp Business Checker API

Verifying whether a phone number belongs to a legitimate business is a critical step in reducing fra…

Why Local PDF Merge Beats Online (Privacy & Speed)

-- title: Why Local PDF Merge Beats Online (Privacy & Speed) published: true description: Online PDF…

CVE-2026-53950: CVE-2026-53950: DOM-based Cross-Site Scripting in @tryghost/activitypub

CVE-2026-53950: DOM-based Cross-Site Scripting in @tryghost/activitypub Vulnerability ID: CVE-202…

Building a tamper-evident audit log in NestJS with hash chains

Most audit logs are a lie by omission. You write a row that says "user X deleted document Y at 12:0…

Environment Variables the Safe Way

Environment Variables the Safe Way Environment variables are the standard way to configure applica…