From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
![The Adventures of Blink S6e8: Crypto isn't just Ponzi Schemes [NIST 800-53 CM(3)]](https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fih7t2d7kuhdgzzxrkdvc.png)
Ben Link1d ago • 2 min read
The Adventures of Blink S6e8: Crypto isn't just Ponzi Schemes [NIST 800-53 CM(3)]
Hey friends! Today on The Adventures of Blink, we're digging into CM-3's sixth enhancement, and.....
#cryptography#security#compliance
1 2
Sammi De Blas Oct 16, 2026 • 3 min read
EU opens first AI Act file over two agents that escaped their sandbox
The EU AI Office asked OpenAI and Anthropic about two summer incidents: an agent that left its sandb...
#ai#security#iot#compliance
1 1
DevOps Daily4d ago • 16 min read
SOC 2 Evidence From GitHub and Terraform, and the Part That Still Needs a Person
We pointed a small evidence collector at a GitHub repository whose main branch had a strict ruleset:...
#security#soc2#compliance#github
5 0
Hermes1d ago • 5 min read
The unsubscribe that never unsubscribed
The unsubscribe that never unsubscribed A customer filed a spam complaint against one of...
#email#compliance#reliability#devops
0 0
Li ZhuojunOct 16, 2026 • 6 min read
I checked nine free RFC 3161 endpoints against the EU Trusted List. None is qualified. Five of the companies are.
On 16 October 2026 I sent one timestamp request to each of nine public, free RFC 3161 endpoints and....
#security#ai#compliance#python
1 0
polycratia6d ago • 7 min read
A date is not a version: strict parsing under OSV ranges
A vulnerability range is a claim about ordering, and it is worth no more than the version parser...
#go#security#compliance#fintech
0 0
Shivanshu Tripathi2d ago • 7 min read
21 CFR Part 11 Audit Trail Requirements: A Developer's Guide Built on FDA 483 Data
Picture a QC lab at 23:58. An analyst signed in as shared01 deletes a failing assay result and rerun...
#security#webdev#healthtech#compliance
0 0
polycratia5d ago • 6 min read
A post-quantum migration plan should print its arithmetic
A cryptographic inventory lists what you have. A migration plan claims what to do first, and that...
#go#security#compliance#fintech
0 0
Alessio 6d ago • 4 min read
A Tamper-Evident Audit Log in Python and SQLite: Hash Chains, Verification and Exports
Build a tamper-evident audit log with a SHA-256 hash chain in SQLite: record events, verify integrit...
#sqlite#security#compliance#logging
0 0
Hans Study6d ago • 3 min read
CPCSC for security integrators: what changes
CPCSC reaches integrators through project files, remote support, and installed devices. Where integr...
#cybersecurity#compliance#canada#security
0 0
Matheus Feijão 2d ago • 4 min read
Capas del guardrail y latencia
Los guardrails de IA se implementan en capas superpuestas —preprocesamiento, ejecución y postprocesa...
#ai#security#compliance#guardrails
0 0
Matheus Feijão Oct 16, 2026 • 3 min read
Immutable audit trail
An immutable audit trail is a cryptographically secured, append-only record of system events that ca...
#ai#security#compliance#guardrails
0 0
ROSH™ Company Labs4d ago • 4 min read
The CRA reporting clock is running. Generating an SBOM was never the hard part.
The reporting clock under the EU Cyber Resilience Act (Regulation (EU) 2024/2847) started on 11...
#security#compliance#opensource#supplychain
0 0
Matheus Feijão Oct 16, 2026 • 4 min read
Audit trail imutável
Um *audit trail imutável* é um registro sequencial, criptograficamente protegido e não editável de t...
#ai#security#compliance#guardrails
0 0
Matheus Feijão 1d ago • 3 min read
Catalog: 10 official guardrails
The IBM Granite Guardrails Catalog comprises 10 officially published, production-ready AI safety gua...
#ai#security#compliance#guardrails
0 0
Matheus Feijão 2d ago • 3 min read
Guardrail layers and latency
AI guardrail layers—input validation, content moderation, output filtering, and policy enforcement—i...
#ai#security#compliance#guardrails
0 0
Matheus Feijão 4d ago • 3 min read
The Guarded by g.cloud badge
The *Guarded by g.cloud* badge signals that an AI solution has undergone IBM Granite-based guardrail...
#ai#security#compliance#guardrails
0 0
Matheus Feijão Oct 16, 2026 • 4 min read
Audit trail inmutable
Un *audit trail inmutable* es un registro técnico que, una vez creado, no puede ser modificado ni el...
#ai#security#compliance#guardrails
0 0
Hans Study2d ago • 3 min read
03.14.09, Canada's one addition to NIST SP 800-171
ITSP.10.171 adds a dedicated administration workstation requirement that NIST doesn't have. Here is ...
#cybersecurity#compliance#canada#sysadmin
0 0
polycratia1d ago • 6 min read
Validate VEX on the way out, not on the way in
A tool that both reads and writes VEX documents ends up with one struct carrying two opposite...
#go#security#compliance#fintech
0 0
Brandon Sooknanan2d ago • 3 min read
Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix
What to write down, who signs it, and when to ask again
#security#cybersecurity#compliance#sysadmin
0 0
Matheus Feijão 2d ago • 4 min read
Camadas do guardrail e latência
Camadas do guardrail referem-se à estrutura hierárquica de controles de segurança e conformidade apl...
#ai#security#compliance#guardrails
0 0
Rajiv IyerOct 16, 2026 • 4 min read
From spreadsheets to a controlled QMS: the four things the foundation must do
The first CAPA log I ever maintained lived in a shared Excel file with version numbers in the...
#qms#medtech#compliance#testing
0 0
Hans StudyOct 16, 2026 • 4 min read
CPCSC physical security: access control and CCTV
What ITSP.10.171 physical protection asks of card access and camera systems, the configuration that ...
#cybersecurity#compliance#canada#security
0 0