From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
Athreya aka Maneshwar1d ago • 12 min read
PHP2Shell: Your Code Was Fine, The Engine Was Not
Hello, I'm Maneshwar, and I'm building LiveReview — a blast-radius aware AI code review built for...
#php#security#webdev#devops
19 2
Sourish Panda7h ago • 25 min read
Breach Week Dropped 10 'Patch Now' Posts. A Local Gemma Boiled Them Down to 2 Lines, and Code Checked Every Number It Wrote.
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady On Oct....
#devchallenge#hf26challenge#temporal#security
11 0
Sarvar Nadaf4d ago • 8 min read
I built an AWS agent that scores any GitHub repo before you clone it
7,600 fake repos shipped in 2026, 800 posing as AI skills and MCP servers. RepoPilot scores any repo...
#aws#ai#security#discuss
23 7
christine1d ago • 5 min read
Patch Your PHP: What PHP2Shell Means for WordPress Sites
Two critical PHP runtime bugs allow unauthenticated remote code execution. Updating WordPress won't ...
#php#security#wordpress#cve
8 4
Om Shree19h ago • 5 min read
Why Vision Is the Dumbest AI in Pop Culture
Spoilers for VisionQuest S1E3 and S1E4 ahead. After watching VisionQuest season 1, episodes 3 and 4...
#ai#opensource#security#discuss
6 0
Sam LABBE3d ago • 5 min read
OpenCode lost the keys that lived in its cloud. The ones on disk were fine.
A breach of OpenCode's online console exposed 1.4% of users' stored API keys — five-figure bills at ...
#security#ai#devtools#api
11 11
Sam LABBE15h ago • 5 min read
The CA whose private key was the number 4 just quit the certificate business
Five days after the number-4 key story, eMudhra's board voted to exit the global SSL/TLS business — ...
#security#infosec#pki#tls
6 0
Sam LABBE2d ago • 5 min read
Who watches the watcher when the watcher is a file in the repo?
OpenAI disclosed that two of its own coding agents weakened the monitoring built to catch their misb...
#security#ai#agents#devops
11 15
Sam LABBE4d ago • 8 min read
I put a logging proxy in front of an LLM client: here's what it emitted
A viral rant says run your own LLM proxy; the HN thread asks how. Here is the runnable answer — one ...
#ai#security#python#devops
11 12
Sam LABBE1d ago • 6 min read
A CA private key was the number 4. Your curl still trusts it (CVE-2026-111943)
Eight eMudhra intermediate CA keys were mis-generated — recoverable from the public certificates sin...
#security#infosec#tls#pki
6 2
TOMOAKI ishihara1d ago • 10 min read
Testing the AWS WAF Mitigations for PHP2Shell on Both CloudFront and an ALB
I deployed the AWS WAF rules published for PHP2Shell (CVE-2026-109618 / 109619) on CloudFront (64 KB...
#aws#security#cdk#php
7 0
Lucas Neves Pereira5d ago • 5 min read
I Built a Remote to Answer Claude Code From My Phone
Hello there! If you run Claude Code or Codex for real work, you know the moment. You start a task,....
#swift#go#ios#security
1 0
Varshith V Hegde1d ago • 8 min read
PHP2Shell, explained: the two critical PHP bugs every team needs to patch
On October 21, 2026, PHP shipped an emergency security release for two critical vulnerabilities in.....
#php#security#webdev#programming
12 5
Dhanush N6d ago • 3 min read
agentcheck: your CLAUDE.md is an instruction file nobody reviews. Scan it.
Repositories now ship instruction files for AI coding agents: CLAUDE.md, AGENTS.md, .cursor/rules,.....
#security#ai#opensource#devtools
8 7
Reet Singh5d ago • 6 min read
Hijack Radar: your lockfile said you were safe. Your dependency graph knew better.
Monday, September 8, 2025 A maintainer of some of the most-used packages on npm gets an...
#cybersecurity#javascript#node#security
11 1
Nikoloz Turazashvili (@axrisi)1d ago • 9 min read
PHP vulnerability PHP2Shell: what the October 21 emergency release fixed and what is still disputed
PHP2Shell is two critical PHP remote code execution flaws fixed on October 21, 2026. A plain-languag...
#php#security#programming#wordpress
1 1
christine8h ago • 5 min read
Not Letting PHP Have All the Fun: Ruby’s Regexp Fixes for GitLab’s CVEs
GitLab found memory corruption bugs in Ruby's regular expression engine that could lead to remote co...
#ruby#security#cve#gitlab
3 0
Sam LABBE13h ago • 5 min read
Agents should never hold your API keys. NVIDIA just open-sourced the runtime that enforces it
NVIDIA open-sourced OpenShell: a runtime where agent fleets get kernel-level sandboxes, never hold y...
#ai#security#agents#opensource
11 18
Nikoloz Turazashvili (@axrisi)2d ago • 8 min read
Certificate authority keys: eMudhra's browser and runtime trust gap
The eMudhra certificate authority incident shows why browser blocklists and runtime CA bundles need ...
#security#devops#python#programming
2 1
Nikoloz Turazashvili (@axrisi)5d ago • 8 min read
API key security after the OpenCode Console breach
API key security after OpenCode's reported Console breach: affected scope, hosted provider credentia...
#security#programming#opensource
3 1
Bargan Constantin1d ago • 9 min read
Anthropic Runs 30,000 Agents at Once. What Keeps Them Under Control?
In one of Anthropic's internal experiments, a group of Claude agents was supposed to solve math...
#ai#agents#security#programming
12 2
Sam LABBE3d ago • 5 min read
Five witnesses and two RIRs: the CAs just discovered custody
Baseline Requirements 3.2.2.9 makes multi-perspective issuance corroboration mandatory on Dec 15: fi...
#security#webdev#dns#devops
8 0
v. Splicer8h ago • 6 min read
6 Ways AI Changes OSINT (For People Who Already Do It Manually)
You were pivoting before it was a prompt. Here's what the machines actually add to the craft — and.....
#ai#programming#security#automation
3 0
Windows Mode2d ago • 7 min read
Your Agent Should Not Run as You: What Windows Now Offers for Containing AI Agents
If you run a coding agent on Windows today, its shell commands usually run with your full user...
#ai#security#windows#discuss
4 4