DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)
c_k_fb750e731394 profile

The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

#security #webdev #ai #devsecops
Comments
5 min read
🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS
anuchito profile

🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS

#security #devsecops #beginners #cybersecurity
1
Comments
1 min read
Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification
alexey_polyakov_cfe2095e3 profile

Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

#security #cybersecurity #python #devsecops
Comments
7 min read
Networking Foundations: From OSI Layers to TCP Handshakes
dharam_in profile

Networking Foundations: From OSI Layers to TCP Handshakes

#devops #devsecops #networking #linux
Comments
6 min read
Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor
c_k_fb750e731394 profile

Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

#security #webdev #ai #devsecops
Comments
5 min read
Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It
grumpysage profile

Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

#security #ai #devsecops #governance
Comments
9 min read
The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)
c_k_fb750e731394 profile

The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

#security #webdev #ai #devsecops
Comments 1
9 min read
Turn Trivy SBOM and SARIF output into versioned release evidence
warnowdigitalsolutions profile

Turn Trivy SBOM and SARIF output into versioned release evidence

#github #devsecops #security #githubactions
Comments
2 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)
c_k_fb750e731394 profile

The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)

#security #webdev #ai #devsecops
1
Comments 1
6 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts
kenimo49 profile

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

#security #npm #javascript #devsecops
2
Comments
6 min read
Shift-Left Security Is Dead When Cursor Writes the Code
c_k_fb750e731394 profile

Shift-Left Security Is Dead When Cursor Writes the Code

#security #webdev #ai #devsecops
Comments
5 min read
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026
uhltak profile

Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026

#supplychainsecurity #supplychainattacks #softwaredependencies #devsecops
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.