Security

security@programming.dev

PostsComments

Kissaki@programming.devEnglish · 4 days ago

Unmasking TeamPCP, King of Software Supply Chain Attacks

0

1

Unmasking TeamPCP, King of Software Supply Chain Attacks

Kissaki@programming.devEnglish · 4 days ago

0

Michael Altfield@slrpnk.netEnglish · 6 days ago

Replacement for Docker Content Trust (DCT)

0

1

Replacement for Docker Content Trust (DCT)

Michael Altfield@slrpnk.netEnglish · 6 days ago

0

codeinabox@programming.devEnglish · 9 days ago

A Sloppy Interface Is a Security Liability

blog.jim-nielsen.com

0

1

A Sloppy Interface Is a Security Liability

blog.jim-nielsen.com

codeinabox@programming.devEnglish · 9 days ago

0

codeinabox@programming.devEnglish · 12 days ago

How to Read a Security Advisory: CVE, GHSA, CWE, and CVSS in Plain Words

agustinbarrientos.com

0

1

How to Read a Security Advisory: CVE, GHSA, CWE, and CVSS in Plain Words

agustinbarrientos.com

codeinabox@programming.devEnglish · 12 days ago

0

schnurrito@discuss.tchncs.deEnglish · 19 days ago

Terabytes of credentials leaked in massive supply-chain attack

arstechnica.com

0

1

Terabytes of credentials leaked in massive supply-chain attack

arstechnica.com

schnurrito@discuss.tchncs.deEnglish · 19 days ago

0

codeinabox@programming.devEnglish · 24 days ago

AI-generated vulnerability patches require human review

0

1

AI-generated vulnerability patches require human review

codeinabox@programming.devEnglish · 24 days ago

0

codeinabox@programming.devEnglish · 29 days ago

An improved attack on 7-round AES

0

1

An improved attack on 7-round AES

codeinabox@programming.devEnglish · 29 days ago

0

codeinabox@programming.devEnglish · 1 month ago

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

www.microsoft.com

0

1

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

www.microsoft.com

codeinabox@programming.devEnglish · 1 month ago

0

Kissaki@programming.devEnglish · 1 month ago

Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard

0

1

Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard

Kissaki@programming.devEnglish · 1 month ago

0

Innerworld@lemmy.worldEnglish · 3 months ago

Russian satellites linked to mysterious GPS disruptions across several countries

0

1

Russian satellites linked to mysterious GPS disruptions across several countries

Innerworld@lemmy.worldEnglish · 3 months ago

0

codeinabox@programming.devEnglish · 3 months ago

17 bugs in 10 weeks from AI security scanning

0

1

17 bugs in 10 weeks from AI security scanning

codeinabox@programming.devEnglish · 3 months ago

0

codeinabox@programming.devEnglish · 3 months ago

Why Hardened Images are Suddenly Everywhere

0

1

Why Hardened Images are Suddenly Everywhere

codeinabox@programming.devEnglish · 3 months ago

0

codeinabox@programming.devEnglish · 3 months ago

Typosquatted npm packages used to steal cloud and CI/CD secrets

www.microsoft.com

0

1

Typosquatted npm packages used to steal cloud and CI/CD secrets

www.microsoft.com

codeinabox@programming.devEnglish · 3 months ago

0

codeinabox@programming.devEnglish · 3 months ago

The approval prompt is lying: a critical coding agent security flaw

0

1

The approval prompt is lying: a critical coding agent security flaw

codeinabox@programming.devEnglish · 3 months ago

0

codeinabox@programming.devEnglish · 4 months ago

GitHub Actions Cache Poisoning is eating open source

0

1

GitHub Actions Cache Poisoning is eating open source

codeinabox@programming.devEnglish · 4 months ago

0

codeinabox@programming.devEnglish · 4 months ago

Mythos finds a curl vulnerability

0

1

Mythos finds a curl vulnerability

codeinabox@programming.devEnglish · 4 months ago

0

codeinabox@programming.devEnglish · 4 months ago

Why “Trusted Publishing” Can’t Save Us from Social Engineering

adventures.nodeland.dev

0

1

Why “Trusted Publishing” Can’t Save Us from Social Engineering

adventures.nodeland.dev

codeinabox@programming.devEnglish · 4 months ago

0

codeinabox@programming.devEnglish · 4 months ago

Your Container Is Not a Sandbox

emirb.github.io

0

1

Your Container Is Not a Sandbox

emirb.github.io

codeinabox@programming.devEnglish · 4 months ago

0

codeinabox@programming.devEnglish · 4 months ago

Arbitrary code execution and Claude Code CLI: How Claude executed code before you click 'trust'

www.sonarsource.com

0

1

Arbitrary code execution and Claude Code CLI: How Claude executed code before you click 'trust'

www.sonarsource.com

codeinabox@programming.devEnglish · 4 months ago

0

codeinabox@programming.devEnglish · 4 months ago

At Machine Speed

matthiasott.com

0

1

At Machine Speed

matthiasott.com

codeinabox@programming.devEnglish · 4 months ago

0

Security@programming.dev

security@programming.dev

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !security@programming.dev

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don’t be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

8 users / day
0 users / week
0 users / month
0 users / 6 months
1 local subscriber
2.15K subscribers
50 Posts
0 Comments
Modlog

mods:
Vacant@programming.dev

programming.dev

A collection of programming communities

Welcome Programmers!

programming.dev is a collection of programming communities and other topics relevant to software engineers, hackers, roboticists, hardware and software enthusiasts, and more.

The site is primarily english with some communities in other languages. We are connected to many other sites using the activitypub protocol that you can view posts from in the “all” tab while the “local” tab shows posts on our site.

🔗 Site with links to all relevant programming.dev sites

🟩 Not a fan of the default UI? We have alternate frontends we host that you can view the same content from

ℹ️ We have a wiki site that communities can host documents on

⚖️ All users are expected to follow our Code of Conduct and the other various documents on our legal site

🏘️ Want to create a new community? Please follow our Community Guidelines

❤️ The site is run by a team of volunteers. If youre interested in donating to help fund things such as server costs you can do so here

💬 We have a microblog site aimed towards programmers available at https://bytes.programming.dev/

🛠️ We have a forgejo instance for hosting git repositories relating to our site and the fediverse. If you have a project that relates and follows our Code of Conduct feel free to host it there and if you have ideas for things to improve our sites feel free to create issues in the relevant repositories. To go along with the instance we also have a site for sharing small code snippets that might be too small for their own repository.

🌲 We have a discord server and a matrix space for chatting with other members of the community. These are bridged to each other (so you can interact with people using matrix from discord and vice versa.

Fediseer