Dev.to Security

The Illusion of Email Security: What We Found Analyzing the Tranco Top-1M (2026)

We often hear that email authentication is a "solved problem." The industry narrative claims that af…

CVE-2026-67438: CVE-2026-67438: OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check in OliveTin

CVE-2026-67438: OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check in…

ADhammer: a full Active Directory pentest tool in Rust

Full AD pentest + audit tool in Rust, single static binary. Whole DCE/RPC · NTLM · SMB2 · Kerberos s…

ECHO — a living pixel companion on your taskbar: he fights demons from your screen edge, plays guitar at midnight, and learns your rhythm

A pixel-art companion who lives on your Windows taskbar. Two heroes: Corvin the silent Warden (voice…

Upgrade Your Existing CCTV Cameras with AI — No Need to Replace Everything

AI CCTV Upgrade is the easiest and most cost-effective way to transform your existing CCTV cameras i…

CVE-2026-63118: CVE-2026-63118: DNS-Rebinding and Cross-Origin Request Execution in Model Context Protocol (MCP) Ruby SDK

CVE-2026-63118: DNS-Rebinding and Cross-Origin Request Execution in Model Context Protocol (MCP) Rub…

Four supply chain attacks, and none of them was a bug in our code

We started the project last spring. New service, six weeks to ship, so we did what everyone does and…

Designing a Secure AWS Multi-Account Landing Zone: Architecture Patterns for Enterprise Scale

very enterprise AWS deployment eventually hits the same inflection point: a single account becomes u…

The Phone Behind the Flour Sacks: How a $0 Camera Cleared the New Hire Everyone Blamed

The register came up short on a Friday, and by Monday everyone on the schedule had already decided w…

[TryHackMe Writeup] Packed Light

**Network Forensics — C2 Keylogger Exfiltration via HTTP Cookie ** File: traffic.pcapng Category: …

Give Your AI Agent an Identity, Not Your API Key

You paste an API key into your agent. One line in a .env file. It works right away. But that key is…

Your IT Delivery Keeps Failing and Here Is Why

Ask any IT team whether they have delivery commitments around equipment and the answer is almost alw…