agent-security
3 posts — newest first.
-
MCP Server Cards Are Final. The Best Decision Was What They Left Out.
SEP-2127 merged on 6 October: a card says who an MCP server is and where to connect, but never what tools it has. Why that's right, and where it's too relaxed.
-
Every HTTP Tool You Give an Agent Is an SSRF Primitive
Zenity's AgentCorruption went from one prompt to every AgentCore agent in a region. Every link was a default. Here's the control that breaks each one.
-
Nine Agentic Exploits, One Sentence Worth Memorising
OWASP's Q3 2026 roundup reads as a containment failure report: agents escaped lab boundaries and reached real third parties. The prompt was the boundary.