menu

Recent posts tagged owasp

Level UI • 1 day • in Articles • 9 min read
An MCP server is not a new API. It is a thin layer over the one you already have
Somewhere in the last year, "do we need an MCP server?" joined the list of questions that arrive in a brief before anyone has said what the thing is for. It is usually framed as MCP vs API, as though the Model Context Protocol were a newer kind of AP...
post-cover-33074
  • ai
  • api
  • webdev
  • security
9 Reactions 7 Comments
EmmeKappa23 • 2 days • in Articles • 5 min read
The Guardian denied both commands. It never read either one.
An MCP tool with one argument, script. I asked the OWASP Agent Control Standard ACS reference Guardian to judge two calls: echo ciao and echo rm -rf /. It denied both, for the same reason: {"decision":"deny","reasoning":"mapping.yaml reads tool \"mc...
post-cover-32969
  • security
  • ai
  • owasp
  • llm
0 Reactions 1 Comments
EmmeKappa23 • 3 days • in Articles • 3 min read
The Guardian blocked the command. The agent told me how to go around it.
The Guardian denied the command. Then the model wrote this: > To print the string anyway, run ! echo rm -rf / in your prompt, which skips my tool calls and their hooks. That was Claude Code, running through an OWASP Agent Control Standard ACS Guard...
post-cover-32710
  • security
  • ai
  • owasp
  • llm
0 Reactions 2 Comments
EmmeKappa23 • 4 days • in Articles • 5 min read
The Guardian redacted my secret. The Read tool walked around it.
I put a fake AWS key in a file and asked Claude Code to read it twice in the same session: once with its Read tool, once with cat. An OWASP Guardian sat between the agent and its tools. With cat, the model got this: AWSACCESSKEYID=REDACTED With R...
post-cover-32694
  • ai
  • security
  • owasp
  • testing
0 Reactions 0 Comments
Tom Smithverified • Sep 17 • in Articles • 4 min read
OWASP Founder Jeff Williams: Stop Studying the Robot's Brain. Start Controlling Its Body.
Jeff Williams, founder of OWASP and founder and CTO of Contrast Security, has spent the last several years watching the security industry pour its attention into one question: can you jailbreak the model, trick it, make it say something dangerous. He...
post-cover-27559
  • owasp
  • appsec
  • cybersecurity
  • agenticai
6 Reactions 0 Comments
Manuela Schrittwieser • Aug 24 • in Articles • 1 min read
OWASP Top 10 for LLMs: From Risk to Concrete Engineering Fixes
The OWASP Top 10 for LLM Applications is a great starting point for understanding AI security. But knowing the risks isn't enough. The real question is 𝗪𝗵𝗮𝘁 𝗱𝗼 𝘆𝗼𝘂 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁 𝘁𝗼 𝗺𝗶𝘁𝗶𝗴𝗮𝘁𝗲 𝘁𝗵𝗲𝗺? When analyzing the OWASP LLM risks from an en...
post-cover-25282
  • aisecurity
  • aiengineering
  • llmsecurity
  • owasp
10 Reactions 2 Comments
Datalaria • Aug 15 • in Articles • 9 min read
Prompt Injection: The Vulnerability Your AI Agent Doesn't Know It Has
Your CrewAI agent has the same problem web servers had in 2005: it accepts user input without sanitizing. In 2005, the vulnerability was called SQL Injection and it allowed an attacker to execute arbitrary commands on your database with a '; DROP TAB...
post-cover-24676
  • promptinjection
  • tooling
  • cibersecurity
  • owasp
3 Reactions 1 Comments
emmajohn • Aug 7 • in Articles • 4 min read
Understanding the OWASP Top 10 with Real-World Examples
Understanding the OWASP Top 10 with Real-World Examples Web applications have become the backbone of modern businesses, handling everything from online payments and customer accounts to healthcare records and enterprise data. As applications grow m...
  • owasp
  • cybersecurity
  • web
  • security
5 Reactions 1 Comments
Lucky • Jun 4 • in Videos • 1 min read
Verified or Not? Ep. 1 — Testing 9 Engines Against OWASP Juice Shop
Welcome to Verified or Not — the series where I put Debuggix to the test against real, known repositories to prove it actually works. For the first 6 episodes, I'm not scanning random code. I'm targeting repos that the security community already k...
post-cover-19657
  • verifiedornot
  • debuggix
  • owasp
  • cybersecurity
6 Reactions 1 Comments
strange-developer • Jun 3 • in Articles • 2 min read
OWASP's Duty to Human Rights: Why AI Security Matters for Human Dignity
AI's Rapid Growth and Lack of Regulation AI security is not only about protecting passwords and secrets, but it's about ensuring human safety first and foremost just as in software security in general. We have seen recent years how AI has been rap...
post-cover-19638
  • ai
  • cybersecurity
  • governance
  • owasp
5 Reactions 2 Comments
Tom Smithverified • 1 day • in Articles • 9 min read
Developer Weekly Briefing — October 30, 2026
Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...
post-cover-33104
  • agenticai
  • devsecops
  • github
  • localai
6 Reactions 3 Comments
To see more, click for the full list of posts or popular tags.
chevron_left
🔥 9 posts • 👩‍💻 7 active writers
✨ Want to write in this topic?
Share your learning. Get discovered. Build your profile.
Join CoderLegion
💡 Why developers use CoderLegion
Track learning • Share posts • Get ranked publicly
Create your profile