←All topics

prompt-injection

3 pieces of writing

security13 min read

OpenClaw's 470 advisories show unauthenticated RCE became a cloud AI platform pattern

OpenClaw's 470 advisories show how cloud AI platforms turn prompt handling, tool calls and host execution into an unauthenticated RCE pattern at scale.

Prompt injection turned MCP-connected code assistants into attack proxies
security11 min read

Prompt injection turned MCP-connected code assistants into attack proxies

MCP gave AI tools a standard interface. Researchers found it was also an attack surface.
security12 min read

MCP gave AI tools a standard interface. Researchers found it was also an attack surface.