DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors
roxdavirox profile
Davi

JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors

#ai #cybersecurity #llm #security
Comments
5 min read
Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint
roxdavirox profile
Davi

Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint

#authentication #cybersecurity #infosec #security
Comments
5 min read
PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows
roxdavirox profile
Davi

PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows

#authentication #cybersecurity #security
Comments
5 min read
OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization
roxdavirox profile
Davi

OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization

#authentication #cybersecurity #security
Comments
5 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
roxdavirox profile
Davi

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs
roxdavirox profile
Davi

HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs

#api #authentication #cybersecurity #security
Comments
6 min read
CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel
roxdavirox profile
Davi

CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel

#cybersecurity #infosec #security
Comments
6 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
roxdavirox profile
Davi

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service
roxdavirox profile
Davi

gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service

#api #backend #cybersecurity #security
Comments
5 min read
Agent Output Is an Injection Vector: SQL, Shell, and Template Engines
roxdavirox profile
Davi

Agent Output Is an Injection Vector: SQL, Shell, and Template Engines

#agents #ai #cybersecurity #llm
Comments
5 min read
BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method
roxdavirox profile
Davi

BFLA Survives Pentests: Why Testers Never Try the Wrong HTTP Method

#api #cybersecurity #security #testing
Comments
5 min read
Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production
roxdavirox profile
Davi

Exposed Spring Boot Actuator: /heapdump Delivers Credentials in Production

#cybersecurity #devops #security
Comments
5 min read
RBAC Blocks the Wrong Layer: Mass Assignment Exploits the Fields Authorization Never Checked
roxdavirox profile
Davi

RBAC Blocks the Wrong Layer: Mass Assignment Exploits the Fields Authorization Never Checked

#api #cybersecurity #infosec #security
Comments
6 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
roxdavirox profile
Davi

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store
roxdavirox profile
Davi

OAuth Token Leakage in Agentic AI: When the Context Window Becomes a Credential Store

#ai #cybersecurity #llm #security
Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.