PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Otto Support – An MCP, Agentic-AI Security Challenge

bishopfox.com | blog | #ai-security | #rce | #ctf | #mcp | #privilege-escalation | #ai-agents | #training | #otto-support
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox releases otto-support, a CTF around a vulnerable MCP customer-support server: a Go binary with 19 tools across four privilege levels, requiring escalation, data exfiltration, and RCE.
Published
Collected

Related coverage

blog · about.gitlab.com
New MCP tools help platform teams scale automation safely
GitLab 19.4 expands the GitLab MCP server tool set so agents can run pipelines, open merge requests, and triage vulnerabilities, while writes, merges, and deletes still wait for a human reviewer.
blog · wiz.io
Growing the WIN AI Ecosystem with Agent Integrations
Wiz MCP agent integrations now let partner AI agents pull live Wiz context—Issues, findings, attack paths—on demand from customer tenants, with the WIN partners endpoint GA for building integrations.
tool · github.com
SpecterOps Skills: Open-Source LLM Agent Skills & MCP Plugin Marketplace for Red Teaming and AppSec
As AI-assisted offensive security evolves from simple prompting to multi-agent architectures, SpecterOps standardizes security craft into declarative skills and MCP interfaces, allowing operators to safely orchestrate complex red team tradecraft and reverse engineering directly through LLM agents.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · about.gitlab.com
What happens when vulnerabilities are discovered faster than you can fix them?
AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back