DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your LLM API Keys Are Cash. The METR Breach Proves It.
secbyjasonmiller profile

Your LLM API Keys Are Cash. The METR Breach Proves It.

#apiauth #secrets #aiagents
Comments
3 min read
Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor
secbyjasonmiller profile

Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor

#supplychain #secrets #aiagents
Comments
3 min read
Infisical duplicate secrets: which copy is live? Check before you delete
iam-tech profile

Infisical duplicate secrets: which copy is live? Check before you delete

#homelab #security #infisical #secrets
Comments
5 min read
Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required
denlava profile

Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required

#security #rust #secrets #binaries
Comments
11 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.
secbyjasonmiller profile

The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.

#supplychain #secrets #aiagents
Comments
3 min read
Protecting access tokens on developer workstations: the attack path that skips your CI controls
jeffreyciend profile

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools
Comments
3 min read
Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.
secbyjasonmiller profile

Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.

#supplychain #secrets
Comments
3 min read
GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It
secbyjasonmiller profile

GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It

#soc2 #secrets #aiagents
Comments
4 min read
External Secrets Operator + CSI Driver: The Setup That Survived Our SOC 2 Audit
scsoi profile

External Secrets Operator + CSI Driver: The Setup That Survived Our SOC 2 Audit

#kubernetes #security #secrets #devops
Comments
3 min read
AI Autonomy: How to Find the Autonomy Your Agents Already Have
dwayne_mcdaniel profile

AI Autonomy: How to Find the Autonomy Your Agents Already Have

#ai #security #devsecops #secrets
Comments
13 min read
Service Account Credential Rotation: The Blast-Radius Checklist
dwayne_mcdaniel profile

Service Account Credential Rotation: The Blast-Radius Checklist

#security #devops #secrets #devsecops
Comments
9 min read
AI Created a Leaked Credentials Flood: Here's How We're Draining It
dwayne_mcdaniel profile

AI Created a Leaked Credentials Flood: Here's How We're Draining It

#security #ai #secrets #devsecops
Comments
6 min read
Credential Security: What Endpoint Protection Really Means for Secrets
dwayne_mcdaniel profile

Credential Security: What Endpoint Protection Really Means for Secrets

#security #devops #secrets #endpointsecurity
Comments
9 min read
Why Secrets Slip Through Every Layer of Your Security Stack
dwayne_mcdaniel profile

Why Secrets Slip Through Every Layer of Your Security Stack

#security #appsec #devsecops #secrets
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.