DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
12 Questions That Actually Separate Threat Detection Vendors
hammad_anjum profile

12 Questions That Actually Separate Threat Detection Vendors

#cybersecurity #infosec #security
Comments
8 min read
THE DARK SIDE OF DNS: WEAPONIZING RECURSIVE RESOLVERS FOR STEALTH DATA EXFILTRATION
njenga_nganga_00063bc67 profile

THE DARK SIDE OF DNS: WEAPONIZING RECURSIVE RESOLVERS FOR STEALTH DATA EXFILTRATION

#cybersecurity #infosec #networking #security
1
Comments
8 min read
Patch Tuesday September 2026: 2 Zero-Days, 119 Critical Fixes Among 1186 CVEs
ian_bishop_98bf15c6a498d4 profile

Patch Tuesday September 2026: 2 Zero-Days, 119 Critical Fixes Among 1186 CVEs

#cybersecurity #infosec #microsoft #security
Comments
3 min read
HTB - Funnel
zkrnvkf profile
Jung

HTB - Funnel

#cybersecurity #infosec #linux #security
Comments
3 min read
HTB - Preignition
zkrnvkf profile
Jung

HTB - Preignition

#cybersecurity #infosec #linux #security
Comments
1 min read
StyleSmuggler: Magento Zero-Day CVE-2026-75650 Drops a Rust Backdoor and a PHP Web Shell
etairos profile

StyleSmuggler: Magento Zero-Day CVE-2026-75650 Drops a Rust Backdoor and a PHP Web Shell

#cybersecurity #infosec #security
Comments
5 min read
When Critical Infrastructure Gets Hacked: What the Rand Water Cyber Incident Teaches Us About IT, OT and Cyber Resilience
songeziwe profile

When Critical Infrastructure Gets Hacked: What the Rand Water Cyber Incident Teaches Us About IT, OT and Cyber Resilience

#cybersecurity #infosec #southafrica #infrastructure
Comments
5 min read
A Clean Penetration Test Report Does Not Mean You Are Secure. I Write These Reports, and Here Is What They Actually Prove.
tarun_jaswani_e9a4c1020df profile

A Clean Penetration Test Report Does Not Mean You Are Secure. I Write These Reports, and Here Is What They Actually Prove.

#cybersecurity #infosec #security
Comments
7 min read
CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel
roxdavirox profile
Davi

CSWSH: Four Major WebSocket Frameworks Default to Vulnerable While Attackers Get a Bidirectional Channel

#cybersecurity #infosec #security
Comments
6 min read
Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint
roxdavirox profile
Davi

Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint

#authentication #cybersecurity #infosec #security
Comments
5 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials
roxdavirox profile
Davi

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

#api #cybersecurity #infosec #security
Comments
6 min read
JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It
roxdavirox profile
Davi

JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It

#authentication #cybersecurity #infosec #security
Comments
5 min read
SAML XSW: Signatures That Validate the Wrong Element
roxdavirox profile
Davi

SAML XSW: Signatures That Validate the Wrong Element

#authentication #cybersecurity #infosec #security
Comments
5 min read
RBAC Blocks the Wrong Layer: Mass Assignment Exploits the Fields Authorization Never Checked
roxdavirox profile
Davi

RBAC Blocks the Wrong Layer: Mass Assignment Exploits the Fields Authorization Never Checked

#api #cybersecurity #infosec #security
Comments
6 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention
roxdavirox profile
Davi

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

#backend #cybersecurity #infosec #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.