Discussions

• 1 You must be logged in to vote

  💬

  OX Security's MCP "execute-first, validate-never" disclosure is one architectural mismatch, not ten CVEs — here's what our tests catch and what they miss

  msaleme started Apr 18, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  📣

  v4.4.0 Released: 470 tests, accuracy sweep, Python 3.13 CI

  msaleme announced Apr 17, 2026 in Announcements

  

  

  0
• 1 You must be logged in to vote

  💬

  CSA: 53% of organizations report AI agents exceeding intended permissions — here's what to test for

  msaleme started Apr 17, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Capsule Security launched today with $7M and two zero-days — here's what their open-source ClawGuard actually does under the hood

  msaleme started Apr 15, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  We can't find a single x402/L402 security test outside this repo. Prove us wrong.

  msaleme started Apr 4, 2026 in General

  

  

  1
• 1 You must be logged in to vote

  💬

  AI trading agents lost $45M because no one tested what happens when an agent can approve its own payments

  msaleme started Apr 13, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  PraisonAI shipped 6 CVEs in one batch — the scariest one lets anyone watch your agents think, live, with no credentials

  msaleme started Apr 13, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Flowise's MCP node had a CVSS 10.0 RCE for 6 months before anyone exploited it — here's what eval() in tool config looks like to an attacker

  msaleme started Apr 13, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  🙏

  Our cost-gate threshold is set at 10x — too aggressive or too lenient for your workload?

  msaleme asked Apr 13, 2026 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  💬

  Help wanted: real-world agent failure stories for our test corpus

  msaleme started Apr 13, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Anthropic's Mythos found zero-days in every major OS for $50 each — what your agent test suite should cover now

  msaleme started Apr 11, 2026 in General

  

  

  1
• 1 You must be logged in to vote

  💬

  RSA 2026: CrowdStrike, Cisco, Palo Alto, and Microsoft all shipped agent identity frameworks. None can detect an agent rewriting its own security policy.

  msaleme started Apr 11, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  CVE-2026-33017 — Langflow's "patched" version was still exploitable. Attackers had working exploits in 20 hours.

  msaleme started Apr 11, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Microsoft AGT has 916 stars but no mutation testing — am I wrong that this is table stakes?

  msaleme started Apr 10, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Is anyone actually validating MCP tool costs before execution? We found a 658x inflation vector.

  msaleme started Apr 10, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Unit 42 found 22 prompt injection techniques targeting AI agents on live websites — here's what we tested

  msaleme started Apr 10, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  LiteLLM backdoor led to 4TB exfiltration from a $10B AI startup — what your agent dependency chain looks like to an attacker

  msaleme started Apr 10, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  CVE-2026-32211 — Microsoft's Azure MCP Server shipped with zero authentication

  msaleme started Apr 10, 2026 in General

  

  

  0
• 1 You must be logged in to vote

  💡

  v4.0 direction: What should the Decision Governance Benchmark include?

  msaleme started Apr 9, 2026 in Ideas

  

  

  0
• 1 You must be logged in to vote

  🙌

  We ran two independent security audits against our own harness. Here's what we found.

  msaleme started Apr 9, 2026 in Show and tell

  

  

  0
• 1 You must be logged in to vote

  📣

  Release: Agent Security Harness v3.10.0 — Prove It to Auditors

  msaleme announced Apr 9, 2026 in Announcements

  

  

  0
• 1 You must be logged in to vote

  💬

  Supply chain poisoning: from npm (Axios) to AI agent tool registries

  msaleme started Apr 6, 2026 in General

  

  

  2
• 1 You must be logged in to vote

  💬

  4 CrewAI CVEs this week — what it means for agent security

  msaleme started Apr 6, 2026 in General

  

  

  1
• 1 You must be logged in to vote

  🙌

  358 security tests across 4 agent protocols — what should we test next?

  msaleme started Apr 4, 2026 in Show and tell

  

  

  0
• 1 You must be logged in to vote

  💬

  What evidence do AIUC-1 auditors actually accept?

  msaleme started Apr 4, 2026 in General

  

  

  0