MCP is quickly becoming the API standard for AI coding agents. That means new attack surfaces, and security engineers need to know how to test them safely.   #ai   #defend   #security   #strategy

This research examines how MCP tools expand the attack surface for autonomous agents, detailing exploit vectors such as tool poisoning, orchestration injection, and rug-pull redefinitions alongside practical defense strategies.   #ai   #defend   #monitor

The article discusses security vulnerabilities in the Model Context Protocol (MCP) that enable remote code execution (RCE) in tools like Claude Code and Gemini CLI.   #attack   #ai

On September 25, 2025, the npm package 'postmark-mcp' was compromised, secretly exfiltrating email contents. Learn about the incident timeline, impact, and immediate mitigation steps, including uninstalling, rotating credentials, and scanning.   #defend   #supply-chain   #ai

Part 2 of Orca's research showing how a single pull request was used to exploit GitHub Actions at Microsoft, Google, and Nvidia, leading to RCE and secret exposure.   #attack   #ci/cd   #defend   #github   #supply-chain

One of the latest additions to Terraform is Terraform search. Although not a feature for directly manipulating your state file, it will likely be involved in the process of bringing existing infrastructure under management by Terraform. This post explains what Terraform search is, how it works, and see a few examples of it in use.   #terraform   #iac   #explain

The Wiz Blog article discusses a critical vulnerability in the AI-powered vibe coding platform Base44, which was recently acquired by Wix. The vulnerability allowed unauthorized access to private applications by exploiting undocumented registration and email verification endpoints, bypassing authentication controls like Single Sign-On (SSO).   #ai   #attack   #saas   #build

A Go library that securely exchanges identity tokens for temporary cloud credentials, with built-in support for AWS, GCP, Azure, OCI, Kubernetes, and OAuth2. You can also refer to the companion blog post.

IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare.

SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks.

This project automates the creation of a complete security lab environment for detection engineering and attack simulation.

This article guides you through planning and implementing an AWS Security Hub proof of concept, covering value assessment, success criteria definition, configuration, deployment, and validation steps.

AWS announced the general availability of new capabilities within AWS Billing and Cost Management that enable customers to manage their AWS spend across multiple organizations through a single AWS account.

Post which reviews the secure network design principles that provide a robust foundation for deploying generative AI applications on AWS while maintaining strong security controls.