Tag: permissions

  • Docker: MCP Horror Stories: The GitHub Prompt Injection Data Heist

    Source URL: https://www.docker.com/blog/mcp-horror-stories-github-prompt-injection/ Source: Docker Title: MCP Horror Stories: The GitHub Prompt Injection Data Heist Feedly Summary: This is Part 3 of our MCP Horror Stories series, where we examine real-world security incidents that validate the critical vulnerabilities threatening AI infrastructure and demonstrate how Docker MCP Toolkit provides enterprise-grade protection. The Model Context Protocol (MCP)…

  • Simon Willison’s Weblog: AI for data engineers with Simon Willison

    Source URL: https://simonwillison.net/2025/Aug/11/ai-for-data-engineers/#atom-everything Source: Simon Willison’s Weblog Title: AI for data engineers with Simon Willison Feedly Summary: AI for data engineers with Simon Willison I recorded an episode last week with Claire Giordano for the Talking Postgres podcast. The topic was “AI for data engineers" but we ended up covering an enjoyable range of different…

  • Simon Willison’s Weblog: Chromium Docs: The Rule Of 2

    Source URL: https://simonwillison.net/2025/Aug/11/the-rule-of-2/ Source: Simon Willison’s Weblog Title: Chromium Docs: The Rule Of 2 Feedly Summary: Chromium Docs: The Rule Of 2 Alex Russell pointed me to this principle in the Chromium security documentation as similar to my description of the lethal trifecta. First added in 2019, the Chromium guideline states: When you write code…

  • Slashdot: OpenAI Releases First Open-Weight Models Since GPT-2

    Source URL: https://slashdot.org/story/25/08/05/1848236/openai-releases-first-open-weight-models-since-gpt-2?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: OpenAI Releases First Open-Weight Models Since GPT-2 Feedly Summary: AI Summary and Description: Yes Summary: OpenAI’s release of two open-weight language models, gpt-oss-120b and gpt-oss-20b, marks a significant development in the AI landscape since 2019. These models enable local deployment on consumer devices and introduce advanced capabilities such as…

  • Embrace The Red: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation

    Source URL: https://embracethered.com/blog/posts/2025/anthropic-filesystem-mcp-server-bypass/ Source: Embrace The Red Title: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation Feedly Summary: A few months ago I was looking at the filesystem MCP server from Anthropic. The server allows to give an AI, like Claude Desktop, access to the local filesystem to read files or edit…