AWS Security LIVE!

Varshith V Hegde

The Most Embarrassing Private Key in Web PKI History

#security #webdev #devops

Oct 27

Akhouri Anmol Kumar

Are You a Python Developer or a Python Expert? 7 Tests I Failed Building 3 Desktop Apps

#python #security #programming

Oct 28

Sam LABBE

Your PDF says AES-256. The key had 9 bits of entropy.

#security #cryptography #pdf

Oct 28

Alex Akimov

DNS rebinding and MCP: why nine in ten servers skip the Origin check

#mcp #ai #security

Oct 28

Nikoloz Turazashvili (@axrisi)

Tailscale SSH Tailworm: what the fix in 1.104.4 closes

#security #devops #news

Oct 28

ROSH™ Company Labs

npm provenance names the tree and the artifact. The thing that decides a rebuild isn't in it.

#security #supplychain #javascript

Oct 28

Iain

GitHub keeps the GPS in photos you attach to issues

#opensource #security #github

Oct 28

md sultan mahamud

"Your MCP server's tool list can be refused before the model sees it: the rules three AI APIs applied to 21,812 lists"

#ai #webdev #mcp

Oct 28

Sunny Chokshi

A hex literal made LLM code reviewers raise false alarms

#security #llm #cryptography

Oct 28

Sunny Chokshi

Detection rate alone ranks the worst LLM code reviewers first

#security #llm #machinelearning

Oct 28

Jeff

The agent cached a GET by path and handed one tenant another tenant's row

#aiagents #caching #security

Oct 28

Alex Akimov

The LiteLLM MCP auth bypass, and the one request that shows it

#mcp #ai #security

Oct 28

munimv2

Your self-hosted AI might be open to the whole network. Here's a 2-minute self-check.

#ai #security #selfhosted

Oct 28

erz

Securing AI Agents & MCP Servers: OAuth Delegation (XAA) & Exfiltration Detection

#mcp #security #ai

Oct 28

Laurels Ozy Echichinwo

Why We Can't Just "Prompt and Hope" Anymore: Engineering a Dedicated Language for AI Agents

#ai #programming #security

Oct 28