cross-site scripting
PulseAugur coverage of cross-site scripting — every cluster mentioning cross-site scripting across labs, papers, and developer communities, ranked by signal.
-
Indirect Prompt Injection: A New Threat to Autonomous AI Agents
Autonomous agent systems, particularly those utilizing the Model Context Protocol (MCP) and browser automation, face a new threat known as Indirect Prompt Injection (IPI). Unlike direct prompt injections, IPI occurs whe…
-
NeuralGuard uses AI to detect code vulnerabilities in development pipelines
The NeuralGuard project introduces an open-source tool designed to detect security vulnerabilities in software code during the development process. It leverages machine learning, transformers, and large language models …
-
Developer integrates OWASP security audits into Claude Code workflow
A developer has created a custom command for Claude Code to perform automated security audits on files before deployment. This command prompts Claude to identify specific vulnerabilities such as SQL injection, cross-sit…
-
AI Chatbot Vulnerabilities: Output Leaks Expose Developers to XSS
A developer discovered 35 bugs in their AI chatbot plugin, with a critical vulnerability stemming from unsanitized model output. This output, which can include HTML or Markdown, was rendered directly into the webpage, c…
-
LLMs show potential to automate app vulnerability exploitation
A security researcher spent $1,500 to test if Large Language Models (LLMs) could exploit vulnerabilities in a specially designed application. The experiment demonstrated that LLMs can replicate human attacker techniques…