KNKartik N V J Kinkartiknvjk.hashnode.dev·Aug 11 · 9 min readHow I evaluate MCP servers for security before I trust them Here is the attack that changed how I think about MCP servers. A server I had never audited publishes a tool called support_lookup. The description reads normally for a paragraph, and then near the en13SCR
YBYashwanth Bharadwajindataaijournal.hashnode.dev·Aug 11 · 9 min readThe Invisible Attack: How Prompt Injection Tricks AIIntroduction We teach AI systems to follow instructions. We give them prompts, provide context, connect them to documents, allow them to browse the web, and increasingly give them access to tools th22K
KMkareem Mohamedinkmb.hashnode.dev·Aug 10 · 2 min readThe Guestbook: A walkthrough of THM Hacker Holidays - Day 13Here is a quick walkthrough of a room in the TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks every day, which started on July 27.Link: https://tryhackme.com/r00
KMkareem Mohamedinkmb.hashnode.dev·Aug 10 · 2 min readThe Concierge Knows Too Much: A walkthrough of THM Hacker Holidays - Day 1Here is a quick walkthrough of a room for TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks every day, starting on 27 July.Link: https://tryhackme.com/room/hh-t00
VNVũ Nhật Lâminblog.fiscybersec.com·Aug 6 · 20 min readAgent Data Injection: Fooling AI Agents With the Data They Already TrustRisk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing, 00
MSManu Shuklainecorpit.hashnode.dev·Aug 4 · 16 min readGPT-Red broke 84% of agent scenarios: 7 controls to ship in 2026GPT-Red broke 84% of agent scenarios: 7 controls to ship in 2026 Summary. OpenAI published GPT-Red on 15 July 2026, an internal-only automated red-teamer trained by self-play. On a replicated version 00
CCoderslabincoderslab.hashnode.dev·Jul 27 · 7 min readAgentic AI | Cybersecurity Threats in 2026For years, security experts warned that artificial intelligence would eventually be used to launch cyberattacks. That moment has arrived. According to Check Point Research's 2026 AI Security Report, A00
MSManu Shuklainecorpit.hashnode.dev·Jul 26 · 13 min readCodeQL 2.26.0 flags AI prompt injection: the 2026 code scanning setup guideCodeQL 2.26.0 flags AI prompt injection: the 2026 code scanning setup guide Summary. On 10 July 2026, GitHub released CodeQL 2.26.0 and added a JavaScript and TypeScript query, js/system-prompt-inject00
VVectorNodeinvectronode.hashnode.dev·Jul 24 · 1 min readHow to Isolate Untrusted Context in RAG and AI AgentsRetrieved documents and tool output can contain text that resembles an instruction. Treat that material as untrusted data. Preserve trust classes Keep these inputs distinct: trusted application polic11A
Mmarcuscheninvoicelatency.hashnode.dev·Jul 19 · 16 min readA caller told our voice agent to ignore its instructions, and it did. The guardrail that fixed it had a 20 millisecond budget.Real time safety on a phone call is a latency problem before it is a safety problem, and most guardrail writeups forget that. Here is the incident, the tools I weighed, and what I shipped. TL;DR. A ca00