DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
npm audit Won't Save You in the First Hour of a Supply-Chain Alert
secbyjasonmiller profile

npm audit Won't Save You in the First Hour of a Supply-Chain Alert

#supplychain #secrets
Comments
3 min read
Vault Coverage Is the Missing Metric in NHI Programs
dwayne_mcdaniel profile

Vault Coverage Is the Missing Metric in NHI Programs

#security #devsecops #nhi #secrets
Comments 1
8 min read
Your AI Agent's Inbox Is an Unauthenticated RPC Endpoint
secbyjasonmiller profile

Your AI Agent's Inbox Is an Unauthenticated RPC Endpoint

#apiauth #secrets #aiagents
Comments
3 min read
Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs
secbyjasonmiller profile

Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs

#apiauth #supplychain #secrets
Comments
3 min read
The Credential in the Repository Nobody Thought Was Public
serguey_shinder_4ab9b87b1 profile

The Credential in the Repository Nobody Thought Was Public

#sergueyshinder #security #devsecops #secrets
Comments
2 min read
Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines
dwayne_mcdaniel profile

Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines

#security #devsecops #appsec #secrets
Comments
12 min read
What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise
dwayne_mcdaniel profile

What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise

#security #devsecops #appsec #secrets
Comments
10 min read
How to Reduce Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Reduce Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
5
Comments 1
8 min read
Why SAST and DAST Aren't Enough for Secrets Security
dwayne_mcdaniel profile

Why SAST and DAST Aren't Enough for Secrets Security

#security #devsecops #appsec #secrets
Comments
10 min read
How to Measure Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Measure Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
Comments
5 min read
You Cannot Rotate a Secret You Cannot Find
devopsdaily profile

You Cannot Rotate a Secret You Cannot Find

#security #secrets #devops #cicd
Comments
9 min read
Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend
leobaniak profile
Leo

Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

#cloudsecurity #googlecloud #incidentresponse #secrets
2
Comments
2 min read
Responding to Exposed Secrets - An SRE's Incident Response Playbook
dwayne_mcdaniel profile

Responding to Exposed Secrets - An SRE's Incident Response Playbook

#security #secrets #sre #devops
Comments
10 min read
Your Secrets Need a VDP, Not Just a Bug Bounty
dwayne_mcdaniel profile

Your Secrets Need a VDP, Not Just a Bug Bounty

#security #secrets #bugbounty #vulnerability
Comments
9 min read
Docker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern
leobaniak profile
Leo

Docker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern

#docker #githubactions #oidc #secrets
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.