AppSec Newsletter 0042

Novo video no canal!

A essa altura do campeonato você já deve ter ouvido sobre MCP. Bem, vamos entender um pouco mais do que é o protocolo e criar o nosso primeiro:

Links

• 🏆 Lakera Gandalf - Prompt Injection Online CTF | lakera.ai

• Remote Code Execution vs. Remote Command Execution vs. Code Injection vs. Command Injection vs. RCE | hakluke.com

• Deceiving users with ANSI terminal codes in MCP | trailofbits.com

• How MCP servers can steal your conversation history | trailofbits.com

• Awesome MCP Security | puliczek

• The MCP Authorization Spec Is... a Mess for Enterprise | christianposta.com

• The Rise of Slopsquatting: How AI Hallucinations Are Fueling a New Class of Supply Chain Attacks | socket.dev

• Securing the Model Context Protocol | block.github.io

Siga o Guia de AppSec nas redes!

• Youtube: youtube.com/@GuiadeAppSec

• Twitter / X: twitter.com/guiadeappsec

• Site: guiadeappsec.com.br