Stories by coderinsan

OpenAI's rogue agents used ntfy.sh as a pub/sub channel

Lethal Trifecta – Using Notion AI's Web Search Tool to Leak Private Notion Pages

Official MCPS are at risk to Willison's lethal trifecta attack

Examples of lethal trifecta based MCP exploits

The insanity of integrating AI into email clients

Claude added working API keys in Cline

Exercise caution when agentic e-shopping

Malicious MCP code execution through Shortwave AI Email

Weaponizing Shopify MCP for Highly Persuasive Selling

Shopify MCP Can Be Abused to Manipulate Customer Purchases

Pythonic Guardrails for MCP Servers

Official Azure MCP exploited to steal users Keyvaults secrets

Why Shortwave AI Email with MCP integration Is a Phisher’s White Whale

A Phisher's White Whale: Shortwave AI Email with MCP Integration

Neon DB MCP exploited to exfiltrate customer data

Securing GitHub Copilot agent mode and MCP Workflows with runtime guardrails

Runtime guardrails to prevent annoying token bleeding with Playwright MCP

Show HN: OneClick local runtime proxy with expressive guardrails for MCP servers

Official Heroku MCP exploit lets attackers hijack app ownership via GET request

Visualize real world attack chains for any MCP server

1