Dev.to Security

How to check your scan results against CISA KEV from the command line

Drafted with AI assistance. Every command below was run on 6 November 2026 (jq 1.7) against the live…

Best practices for implementing LLM access controls and monitoring

What is AI agent security? AI agent security is the discipline of constraining what an LLM-driven …

Policy Fail Mode Is an Architecture Decision, Not an Identity Integration Default

Policy fail mode is what an identity-conditioned rule does when the identity it depends on cannot be…

NETO: Chat P2P local para equipos dev sin depender de la nube

¿Tu equipo comparte credenciales por Slack? ¿Discuten arquitectura en plataformas que almacenan cada…

UpdraftPlus Was Breached: Why Updating Won't Remove What Attackers Planted

Updating your plugins won't save you this time. If you use UpdraftPlus to back up WordPress, this o…

7 failure modes I'd test before giving an AI agent a wallet

I gave an autonomous agent a wallet, a browser, a shell, an email account, and one instruction: earn…

My SOC triage model had 0 false escalations. On real alerts it had 39 out of 100.

On my test set the model got 55 out of 55 verdicts right, with zero false escalations. Then I gave i…

Your Cloud Now Has Two Attack Surfaces. You're Only Monitoring One.

✓ Human-authored analysis; AI used for formatting and proofreading. A coding agent assumes an IAM …

One forged header switched off our per-IP rate limit

Our website's AI chat limited requests per IP, but one forged header made every request look like a …

Why a Cloud Guardrail Is a Contradiction

On November 2nd, GitBook told its users to rotate all their API tokens. An AI agent had reached infr…

Secrets that never hit a git commit still reach your AI tools

A clean git history does not mean a key stayed private. Most teams scan commits for secrets, and tha…

HTB - Broker Writeup - no Metasploit

Summary The target was running a vulnerable version of ActiveMQ. The user account had a sudo rule…