PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

We built the security layer MCP always needed

blog.trailofbits.com | blog | #ai-security | #mcp | #prompt-injection | #llm-security | #tool-release | #security-wrapper
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits released mcp-context-protector, a security wrapper for MCP apps defending against line jumping attacks through server pinning, LLM guardrail scanning, and ANSI sanitization.
Published
Collected

Related coverage

blog · wiz.io
Build AI Security Agents with Wiz MCP
Wiz MCP is now GA, letting AI assistants and custom agents query the Wiz Security Graph, reuse Red, Blue and Green agent analyses, and run AI Skills workflows for triage and remediation.
blog · blog.sentry.security
ChatML Role Injection (CRI)
Attackers can inject system roles into ChatML message arrays to override developer instructions, invoke hidden tools, and pad payloads for denial-of-wallet DoS; strict schema validation is key.
blog · wiz.io
Introducing the Prompt Airlines CTF: Test Your AI Security Skills
Wiz launched Prompt Airlines, a chatbot-based CTF where players exploit AI logic flaws to win a free flight ticket, teaching real LLM security risks; open to all skill levels.
research · wiz.io
Inside 90 days of attacks on AI infrastructure
This research provides real-world threat telemetry on how attackers target modern AI deployments and MCP interfaces.
tool · github.com
LLM SecRange: Open-Source Penetration Testing Playground for Large Language Models & Vulnerable Agents
Offers security researchers and penetration testers an out-of-the-box, comprehensive environment to practice prompt injection, OWASP LLM Top 10 risks, and agent tool-abuse exploitation against real models.
vulnerability · netspi.com
Exploiting a Generative AI Chatbot – Prompt Injection to Remote Code Execution (RCE)
NetSPI built a deliberately vulnerable LLM chatbot to demonstrate prompt injection risks. The walkthrough shows how injected prompts enable data disclosure and, with code execution features, RCE.
Back