Experimental News Clipping Site

Tag: secure coding practices

  • OpenAI : Introducing GPT-5 for developers

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/introducing-gpt-5-for-developers Source: OpenAI Title: Introducing GPT-5 for developers Feedly Summary: Introducing GPT-5 in our API platform—offering high reasoning performance, new controls for devs, and best-in-class results on real coding tasks. AI Summary and Description: Yes Summary: The introduction of GPT-5 on an API platform highlights significant advancements in AI capabilities, particularly in reasoning…

  • Embrace The Red: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amp-agents-that-modify-system-configuration-and-escape/ Source: Embrace The Red Title: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed Feedly Summary: Sandbox-escape-style attacks can happen when an AI is able to modify its own configuration settings, such as by writing to configuration files. That was the case with Amp, an agentic coding tool built by Sourcegraph. The…

  • Embrace The Red: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132)

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/cursor-data-exfiltration-with-mermaid/ Source: Embrace The Red Title: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132) Feedly Summary: Cursor is a popular AI code editor. In this post I want to share how I found an interesting data exfiltration issue, the demo exploits built and how it got fixed. When using Cursor I noticed that…

  • Cloud Blog: A deep dive into code reviews with Gemini Code Assist in GitHub

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/ai-machine-learning/gemini-code-assist-and-github-ai-code-reviews/ Source: Cloud Blog Title: A deep dive into code reviews with Gemini Code Assist in GitHub Feedly Summary: Imagine a code review process that doesn’t slow you down. Instead of a queue of pending pull requests, you have an intelligent assistant that provides a near-instant, comprehensive summary of every change. It flags…

  • Anchore:  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps

    —

    by

    Kurt Seifried
    in

    Source URL: https://webinars.techstronglearning.com/accelerate-secure-optimizing-your-software-supply-chain-with-devsecops Source: Anchore Title:  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps Feedly Summary: The post  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps appeared first on Anchore. AI Summary and Description: Yes Summary: The text discusses optimizing the software supply chain using DevSecOps practices, emphasizing the importance of…

  • The Register: Anthropic won’t fix a bug in its SQLite MCP server

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/25/anthropic_sql_injection_flaw_unfixed/ Source: The Register Title: Anthropic won’t fix a bug in its SQLite MCP server Feedly Summary: Fork that – 5k+ times Anthropic says it won’t fix an SQL injection vulnerability in its SQLite Model Context Protocol (MCP) server that a researcher says could be used to hijack a support bot and prompt…

  • CSA: Primer on Model Context Protocol (MCP) Implementation

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/a-primer-on-model-context-protocol-mcp-secure-implementation Source: CSA Title: Primer on Model Context Protocol (MCP) Implementation Feedly Summary: AI Summary and Description: Yes **Summary:** The text serves as a comprehensive implementation guide for deploying the Model Context Protocol (MCP) with a security-focused lens, emphasizing threat modeling using the MAESTRO framework. It offers practical insights into building secure Large…