The attack that started this project An MCP server exposes a tool called read_file. Buried...
MCP Security in Practice: Building a Go Gateway That Blocks Unsafe AI Tool Calls
Related
An AI reviews each offer developers make to a group of home buyers. When it invents a discount, its review is thrown away.
On Groupliv an AI reviews each offer before a buyer group votes. Code computes its numbers, and a review claiming a discount the offer lacks is written again once, then dropped if ...
32 Lines of Vibe-Coded Flask, 7 Scanner Findings — and 2 Holes It Walked Straight Past
"Securing AI and Vibe-Coded Apps" is one of this site's trend clusters this week — 28 posts in seven...
I couldn't find an AI agent for AppSec audits, so I built one and benchmarked it on real CVEs
Ask Claude Code, or any coding agent, to "check this module for vulnerabilities" and you know how it...