18 articles with this tag
GhostSplice: Multi-Tool Payload Assembly in MCP Agents
Inside GhostSplice (August 2026): how malicious MCP tools split instructions across turns to bypass single-prompt guardrails and exfiltrate developer secrets.
Poisoning the PR: How Invisible Comments Hijack AI Code Reviewers
An architectural deep-dive into indirect prompt injection targeting automated AI PR review bots and local MCP runtimes via hidden Markdown and Unicode comments.
MCP Security Vulnerabilities 2026: MCP Is the New NPM
MCP (Model Context Protocol) security vulnerabilities in 2026: how supply-chain risk and indirect prompt injection turned MCP into the new npm.
When Your Agent Becomes the Exploit: ASI05 & ASI06 — The Twin Threats That Turn AI Autonomy Against You
A deep dive into OWASP Agentic ASI05 and ASI06: the Claude Code CVEs, the Summer Yue incident, and how code execution chains with memory poisoning.
The OpenClaw Meltdown: 9 CVEs, 2,200 Malicious Skills, and the Most Comprehensive Real-World Test of the OWASP Agentic Top 10
In 5 weeks, OpenClaw triggered 8 of 10 OWASP Agentic vulnerability classes. This is the forensic dissection every engineer building AI agents needs to read.
The New Security Bible: Why Every Engineer Building AI Agents Needs the OWASP Agentic Top 10
The OWASP Agentic Top 10 is the first security framework for autonomous AI agents. 10 risks, real incidents, and the attack chains that connect them.
Beyond the Autocomplete: Why the MCP Revolution is the End of 'Copilot' as We Know It
The Agentic IDE Era has arrived. From Xcode 26.3 to GitHub Agent HQ, we're moving from passive suggestions to autonomous engineering. Here's the stack.
The Agentic CLI Takeover: Why Your Terminal is the New IDE Frontier
Autonomous AI agents are taking over the terminal. The architecture behind agentic CLIs, the security risks, and why your shell history is now an asset.
The Syntax Singularity: How One Developer Built a Programming Language in 24 Hours
Bernard Lambeau created Elo, a cross-compiling language targeting JS, Ruby, and SQL, in 24 hours using Claude Code. The Man-Month is dead.
The "Vibe Coding" Revolution: Why the Junior Dev is Dead and the 'Architect-Agent' is Born
Software creation is decoupling from coding. A deep dive into vibe coding, the collapse of the junior market, and the rise of the architect-agent.
The MCP Git Wake-Up Call: Why Your Agentic Workflow Is an Attack Surface
Three critical vulnerabilities in Anthropic's MCP Git server expose a new attack class: indirect prompt injection through tool servers.
Google Antigravity & GSD: The Deterministic AI Agent Guide for Senior Engineers
A technical guide to Google's Antigravity framework, GSD file structures, and why deterministic agent execution beats guesswork in enterprise software.
The Future of MCP: Agents, Composability, and What Comes Next
Where MCP goes next: Linux Foundation governance, 97M monthly downloads, agent composability, remote MCP, and what to learn now for 2026-2027.
MCP in Production: Registries, Docker, and Enterprise Patterns
Deploying MCP servers in production: trusted registries, containerization with Docker or Kubernetes, OAuth 2.1 authentication, and monitoring.
MCP Security: The Uncomfortable Truth About Tool Poisoning and Prompt Injection
Two authors disagree on MCP security. Icarus calls the design fundamentally unsafe; Hephaestus argues tool poisoning and injection are manageable risks.
Building Your First Production MCP Server
A hands-on tutorial building a complete MCP server in TypeScript that analyses GitHub pull requests: tools, resources, prompts and error handling.
MCP Demystified: The Protocol That's Becoming USB-C for AI Agents
A technical analysis of the Model Context Protocol: its architecture, the three primitives, and how it solves the NxM integration problem for AI agents.
Agentic AI Architecture & Strategic Roadmap | Year in Review
Explore the architectural shift from AI Copilots to autonomous agents. Learn about MCP, Memory Safety, context limits, and the future of agentic coding.