DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.
secbyjasonmiller profile

The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.

#supplychain #secrets #aiagents
Comments
3 min read
Protecting access tokens on developer workstations: the attack path that skips your CI controls
jeffreyciend profile

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools
Comments
3 min read
Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.
secbyjasonmiller profile

Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.

#supplychain #secrets
Comments
3 min read
GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It
secbyjasonmiller profile

GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It

#soc2 #secrets #aiagents
Comments
4 min read
External Secrets Operator + CSI Driver: The Setup That Survived Our SOC 2 Audit
scsoi profile

External Secrets Operator + CSI Driver: The Setup That Survived Our SOC 2 Audit

#kubernetes #security #secrets #devops
Comments
3 min read
AI Autonomy: How to Find the Autonomy Your Agents Already Have
dwayne_mcdaniel profile

AI Autonomy: How to Find the Autonomy Your Agents Already Have

#ai #security #devsecops #secrets
Comments
13 min read
Service Account Credential Rotation: The Blast-Radius Checklist
dwayne_mcdaniel profile

Service Account Credential Rotation: The Blast-Radius Checklist

#security #devops #secrets #devsecops
Comments
9 min read
AI Created a Leaked Credentials Flood: Here's How We're Draining It
dwayne_mcdaniel profile

AI Created a Leaked Credentials Flood: Here's How We're Draining It

#security #ai #secrets #devsecops
Comments
6 min read
Credential Security: What Endpoint Protection Really Means for Secrets
dwayne_mcdaniel profile

Credential Security: What Endpoint Protection Really Means for Secrets

#security #devops #secrets #endpointsecurity
Comments
9 min read
Why Secrets Slip Through Every Layer of Your Security Stack
dwayne_mcdaniel profile

Why Secrets Slip Through Every Layer of Your Security Stack

#security #appsec #devsecops #secrets
Comments
5 min read
Vault Coverage Is the Missing Metric in NHI Programs
dwayne_mcdaniel profile

Vault Coverage Is the Missing Metric in NHI Programs

#security #devsecops #nhi #secrets
Comments 1
8 min read
We Hit Our Own LLM Agent With Five Prompt Attacks. The Tool Wrapper Picked What Leaked
secbyjasonmiller profile

We Hit Our Own LLM Agent With Five Prompt Attacks. The Tool Wrapper Picked What Leaked

#apiauth #secrets #aiagents
Comments 1
3 min read
Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs
secbyjasonmiller profile

Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs

#apiauth #supplychain #secrets
Comments
3 min read
Your AI Agents Are Using Your Credentials
dwayne_mcdaniel profile

Your AI Agents Are Using Your Credentials

#ai #security #devsecops #secrets
Comments 1
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.