Lyrie
← Home

#AI-agents

23 stories tagged.

The Mother of All AI Supply Chains: MCP's Architectural RCE Flaw and What It Means for Every AI Agent You Deploy

9 min · 0 sources

When Prompts Become Shells: RCE in AI Agent Frameworks and the Architecture of Trust Collapse

10 min · 0 sources

The Trust Boundary Is Gone: 2026's Cascade of Agentic AI CVEs Proves the Framework Layer Is Now Critical Infrastructure

11 min · 0 sources

From Theoretical to Operational: Indirect Prompt Injection Arrives In the Wild — And It's Already Committing Financial Fraud

11 min · 0 sources

The Colossus Problem: 91% of Production AI Agents Are Vulnerable — And the Industry's Security Frameworks Can't See It

9 min · 0 sources

Comment and Control: How a Single GitHub PR Title Stole API Keys from Claude Code, Gemini CLI, and GitHub Copilot

11 min · 0 sources

The Identity Crisis Nobody's Talking About: A Complete Defensive Playbook for Non-Human Identity Security in the AI Agent Era

12 min · 0 sources

The Environment Is the Exploit: Indirect Prompt Injection Goes Wild — 15,300 Instances, 10 Live Payloads, and the Data-Layer Attack That Model Guardrails Can't Stop

10 min · 0 sources

The Theoretical Is Now Real: 10 In-the-Wild Indirect Prompt Injection Payloads and the Agentic AI Kill Chain

10 min · 0 sources

The Third Layer: How AI Agent Skill Ecosystems Became the Supply Chain That No Scanner Can See

9 min · 0 sources

The Web Is Whispering to Your AI Agents — And They're Listening: Indirect Prompt Injection Hits the Wild

11 min · 0 sources

The Exploit Factory: How AI Coding Agents Are Becoming Autonomous DeFi Exploit Engines

8 min · 0 sources

The Agent Became the Weapon: PromptMink, a16z's DeFi Exploit Research, and the Autonomous Trading Agent Attack Surface

11 min · 0 sources

The Protocol Is the Payload: MCP's STDIO Flaw, Tool Poisoning, and the 150-Million-Download Time Bomb

11 min · 0 sources

The AI agent breach that is coming and how it will happen

1 min · 1 sources

How many of your AI tools have zero security monitoring? Real answer.

1 min · 1 sources

The Web Is a Minefield for AI Agents: Dissecting 10 Real-World IPI Payloads and the Memory Poisoning Upgrade

11 min · 0 sources

47 CVEs this month targeting AI agent infrastructure

1 min · 1 sources

The AI agent framework security gap — named with receipts

1 min · 1 sources

The Web Is the Weapon: 10 Live Indirect Prompt Injection Payloads Confirm IPI Is No Longer Theoretical

10 min · 0 sources

Comment and Control: How a PR Title Became a C2 Channel and Drained Secrets from Three AI Coding Agents

10 min · 0 sources

The Foundation Is the Vulnerability: How MCP's Architectural RCE Flaw Put 200,000 AI Servers at Risk

10 min · 0 sources

Comment and Control: How Prompt Injection Became a Production Exploit Across Every Major AI Coding Agent

12 min · 0 sources