Dev.to Security

Adform's trackpoint-async.js Was Poisoned to Rewrite Crypto Wallet Addresses on Downstream Sites

TL;DR what: Attackers appended two obfuscated malicious blocks to trackpoint-async.js, a legitim…

Verifying AI Agent Actions: Proof Submission Patterns

Verifying AI Agent Actions: Proof Submission Patterns AI agents are increasingly handling real-wor…

GitHub finds your vulnerabilities. Something still has to manage them.

Turn on CodeQL, Dependabot, and Secret Scanning across a handful of repositories and you get exactly…

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet

Marketplace Scams: How to Spot a Fake Buyer or Seller Before You Meet Facebook Marketplace, Craigs…

GDPR Compliant Cloud Storage: Key Features to Consider

Are you looking into gdpr compliant cloud storage? Here's a quick overview of what you need to know.…

When Dependencies Go Bad: Triaging Abandoned Open Source Packages

When Dependencies Go Bad Triaging Abandoned Open Source Packages Back to blog The Threat Landscape o…

We extracted our production post-quantum signing code into a standalone Python library

If you're running AEGIS or ENLIL, every signed artifact they produce — forensic logs, AI council Dec…

Navigating the Security Dilemma: How Freelancers Can Safeguard Their AI Tools

Navigating the Security Dilemma: How Freelancers Can Safeguard Their AI Tools In the realm of free…

A 5-minute preflight before giving an AI coding agent write access

AI coding agents are useful long before a repository is truly ready for them. The risky moment is n…

Critical RCE in Widely-Used VPN Appliances: What CISOs Should Do Now

A newly disclosed unauthenticated remote code execution (RCE) flaw affects several widely deployed V…

My first project in python

Spy – Network Scanner My first real project (now on its 3rd version). I built it to get better at Py…

wkhtmltopdf Is Archived: A .NET Migration Decision

A dependency that stopped shipping releases in 2020 and had its repository archived in 2023 is still…