This post details how a new Trail of Bits engineer discovered two memory corruption vulnerabilities in NVIDIA's Triton Inference Server using Semgrep analysis and HTTP chunked transfer encoding exploitation.   #ai   #attack

Wiz Research discovers a critical vulnerability chain allowing unauthenticated attackers to take over NVIDIA's Triton Inference Server.   #ai   #attack

This post demonstrates how to craft a prompt injection exploit targeting GitHub Copilot by hiding malicious instructions in HTML picture tags within GitHub issues to inject backdoors.   #ai   #attack

Researchers found that once an MCP configuration is approved, subsequent modifications to its commands or arguments are executed without additional user prompts or validations.   #ai   #attack

This article explores techniques for extracting credentials from Azure DevOps pipelines, including workload identity federation tokens and service connection secrets, while discussing potential impacts on Terraform Cloud and GitHub resources.   #attack   #azure   #ci/cd

Here are the security principles that will guide how 1Password builds, adopts, and integrates AI, today and in the future.   #ai   #strategy

A general-purpose Claude Code action for GitHub PRs and issues that can answer questions and implement code changes.

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom. You canl also refer to the companion blog post.

MCP security wrapper. You can also refer to the companion blog post.

Checks Hard to Find Size Limits and Usage for AWS such as AWS IAM. You can also refer to the companion blog post.

A collection of Semgrep rules to facilitate vulnerability research.

Key points include understanding webhook configurations, establishing trust boundaries, and implementing least-privilege access.

Securely share sensitive data with time-limited, nonce-enhanced presigned URLs that prevent replay attacks, minimizing exposure risks through granular access controls and rigorous monitoring.

In this second part of a two-part post, you can learn about multiple solutions for secure file sharing using AWS services and the pros and cons of each.

Google Cloud Setup helps you quickly implement a robust cloud foundation based on recommended best practices, to get up and running quickly.