Aggregator

Large language models (LLMs) aren’t just answering questions anymore. They’re booking travel, crunching data, and even pulling the levers of other software on your behalf. At the center of it is a standard with big implications: MCP — the Model Context Protocol.

The post What is MCP Security? appeared first on Strata.io.

The post What is MCP Security? appeared first on Security Boulevard.

Eric Olden

What is MCP Security?

不安全

5 months 4 weeks ago

本文介绍了Model Context Protocol (MCP)及其在大型语言模型与外部工具交互中的作用。尽管MCP提高了LLMs的能力和效率，但也带来了新的安全风险，如过度授权和API暴露。Strata Identity通过集成身份验证和动态策略执行等措施，为MCP驱动的工作流提供了增强的安全性。

Qilin

Dark Feed IO

5 months 4 weeks ago

You must login to view this content

cohenido

英国电信公司遭勒索软件攻击，AI平台助长网络犯罪|一周特辑

威努特工控安全

5 months 4 weeks ago

点击查看更多本周网络安全大事件。

英国电信公司遭勒索软件攻击，AI平台助长网络犯罪|一周特辑

不安全

5 months 4 weeks ago

当前环境出现异常问题，需完成验证后才能继续访问。

COOKIE SPIDER’s Malvertising Drops New SHAMOS macOS Malware

Hack Read

5 months 4 weeks ago

CrowdStrike reports COOKIE SPIDER using malvertising to spread SHAMOS macOS malware (a new variant of AMOS infostealer), stealing…

Waqas

Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit)

Embrace The Red

5 months 4 weeks ago

In this second post about Windsurf Cascade we are exploring the SpAIware attack, which allows memory persistent data exfiltration. SpAIware is an attack we first successfully demonstrated with ChatGPT last year and OpenAI mitigated.

While inspecting the system prompt of Windsurf Cascade I noticed that it has a create_memory tool.

Creating Memories

The question that immediately popped into my head was if this tool will require human approval when Cascade creates a long-term memory, or if it is added automatically.

Pear

Dark Feed IO

5 months 4 weeks ago

You must login to view this content

cohenido

Automated Incident Response: Everything You Need to Know

Security Boulevard

5 months 4 weeks ago

Learn how security automation streamlines incident response processes for faster response times and maximum efficiency.

The post Automated Incident Response: Everything You Need to Know appeared first on AI Security Automation.

The post Automated Incident Response: Everything You Need to Know appeared first on Security Boulevard.

Katie Bykowski

CVE-2025-52094 | PDQ Smart Deploy 3.0.2040 permission

VulDB Recent Entries

5 months 4 weeks ago

A vulnerability classified as critical was found in PDQ Smart Deploy 3.0.2040. Affected is an unknown function. Such manipulation leads to permission issues. This vulnerability is listed as CVE-2025-52094. The attack must be carried out locally. There is no available exploit.

vuldb.com

CVE-2025-50733 | NextChat HTMLPreview HTML injection

VulDB Recent Entries

5 months 4 weeks ago

A vulnerability classified as problematic has been found in NextChat. This impacts an unknown function of the component HTMLPreview. This manipulation causes HTML injection. This vulnerability is tracked as CVE-2025-50733. The attack is possible to be carried out remotely. No exploit exists.

vuldb.com

CVE-2025-55455 | DooTask 1.0.51 /msg/sendtext information disclosure

VulDB Recent Entries

5 months 4 weeks ago

A vulnerability described as problematic has been identified in DooTask 1.0.51. This affects an unknown function of the file /msg/sendtext. The manipulation results in information disclosure. This vulnerability is identified as CVE-2025-55455. The attack can be executed remotely. There is not any exploit available.

vuldb.com

CVE-2025-55454 | DooTask 1.0.51 /msg/sendfiles unrestricted upload

VulDB Recent Entries

5 months 4 weeks ago

A vulnerability marked as critical has been reported in DooTask 1.0.51. The impacted element is an unknown function of the file /msg/sendfiles. The manipulation leads to unrestricted upload. This vulnerability is referenced as CVE-2025-55454. Remote exploitation of the attack is possible. No exploit is available.

vuldb.com

CVE-2025-55613 | Tenda O3V2 1.0.0.12 fromSafeSetMacFilter mac buffer overflow

VulDB Recent Entries

5 months 4 weeks ago

A vulnerability labeled as critical has been found in Tenda O3V2 1.0.0.12. The affected element is the function fromSafeSetMacFilter. Executing manipulation of the argument mac can lead to buffer overflow. The identification of this vulnerability is CVE-2025-55613. The attack may be launched remotely. There is no exploit available.

vuldb.com

Aggregator

Managed ad