Forem

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io
cverports profile

GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io

#security #cve #cybersecurity #ghsa
Comments
2 min read
13,981 Downloads. A Hardcoded ByteDance Token. Zero Vetting.
jb_wagoner_9397749548b10c profile

13,981 Downloads. A Hardcoded ByteDance Token. Zero Vetting.

#security #ai #opensource #agents
Comments
4 min read
Securing Next.js + Supabase After Switching to NextAuth
Cover image for Securing Next.js + Supabase After Switching to NextAuth
ali_zaib_randhawa profile

Securing Next.js + Supabase After Switching to NextAuth

#webdev #security #web #database
Comments
5 min read
My AI agent pushed directly to main. The system prompt said don't.
Cover image for My AI agent pushed directly to main. The system prompt said don't.
acartag7 profile

My AI agent pushed directly to main. The system prompt said don't.

#python #ai #opensource #security
Comments
6 min read
Digital Stewardship: Why Sovereign Infrastructure is the Silent Requirement for AI Safety
janealesi profile

Digital Stewardship: Why Sovereign Infrastructure is the Silent Requirement for AI Safety

#ai #ethics #security #privacy
Comments 6
2 min read
State of MCP Security
crafted_cyber_solutions profile

State of MCP Security

#ai #mcp #security #agents
Comments
5 min read
Why Your AI Agent Shouldn't Know Your API Keys (And What to Do Instead)
lucamorettibuilds profile

Why Your AI Agent Shouldn't Know Your API Keys (And What to Do Instead)

#security #ai #mcp #devops
1
Comments
3 min read
"CVE-2026-25253: WebSocket hijacking turns your AI agent into an attack tool"
luckypipewrench profile

"CVE-2026-25253: WebSocket hijacking turns your AI agent into an attack tool"

#security #ai #websocket #mcp
Comments
5 min read
How to Check Your Website's Security Headers (And Why You Should)
imcmurray profile

How to Check Your Website's Security Headers (And Why You Should)

#security #webdev #beginners #tutorial
Comments
4 min read
Building an HTTP Header Analyser in Python:
sriram_sriram_b5d5526a7b8 profile

Building an HTTP Header Analyser in Python:

#webdev #security #python #opensource
Comments
3 min read
Contratando para áreas que você não domina
matheusmorett2 profile

Contratando para áreas que você não domina

#cto #startup #security
2
Comments
2 min read
AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00
Cover image for AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00
kanywst profile
kt

AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00

#ai #agents #oauth #security
2
Comments 2
15 min read
I checked the WordPress sites I built years ago. Here's what I found.
y1uda profile

I checked the WordPress sites I built years ago. Here's what I found.

#wordpress #security #webdev #opensource
Comments
6 min read
“It Wasn’t Broken, Just Untrusted: Getting DirSize to Run on macOS Without Any Errors”
ammad155 profile
Andrew

“It Wasn’t Broken, Just Untrusted: Getting DirSize to Run on macOS Without Any Errors”

#productivity #security #tooling #tutorial
Comments
4 min read
The Architecture Behind Tamper-Proof Audit Logs
robertatkinson3570 profile

The Architecture Behind Tamper-Proof Audit Logs

#opensource #security #webdev #tutorial
Comments 1
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.