POPIA grace period limits regulator’s fines

I scanned 500 domains to test my SPF checker. It found four bugs in the checker.

SPF has a limit almost nobody hits on purpose and plenty of people hit by accident: a receiver is allowed to make ten DNS lookups while evaluating your record, and if the chain needs an eleventh it…

• Researcher scanned 500 domains with SPF checker, discovered four bugs
• Checker miscounted DNS lookups, causing false positives/negatives
• Improper handling of truncated DNS responses led to inaccurate SPF assessment

3h ago ·dev.to

CVE-2026-24031 Analysis — Dovecot SQL-Based Authentication Bypass (an auth_username_chars Regression)

1. Overview Item Detail CVE ID CVE-2026-24031 Component Dovecot Core (SQL passdb/userdb authentication) Vulnerability class CWE-89 (SQL Injection) CVSS 3.1 7.7 (High)…

• CVE-2026-24031 affects Dovecot Core's SQL authentication.
• Regression introduced during 2.4 settings-system refactor.
• Authentication bypass possible when authusernamechars is cleared.

3h ago ·dev.to

Krypton MCP – Securing Local LLMs and MCP Tools with Zero-Trust Proxy in Go

Connecting local or cloud LLMs directly to databases, filesystems, and internal APIs via Model Context Protocol (MCP) creates a massive attack surface.

• Krypton MCP secures local LLMs with zero-trust proxy in Go
• Blocks malicious payloads and sanitizes context windows
• Implements Merkle Tree audit logs for interaction proof

3h ago ·dev.to

Skip Roaming Fees with 20GB of Asia Data for $25

Stay online across 18 Asian destinations with instant setup, and no physical SIM card to swap. The post Skip Roaming Fees with 20GB of Asia Data for $25 appeared first on TechRepublic .

3h ago ·techrepublic.com