Invariant Labs
PulseAugur coverage of Invariant Labs — every cluster mentioning Invariant Labs across labs, papers, and developer communities, ranked by signal.
2 day(s) with sentiment data
-
Open-source tools compared for agent security scanning
A comparison of three open-source tools for scanning agent configurations for security risks like prompt injection and supply-chain attacks reveals distinct strengths and weaknesses. Cisco's mcp-scanner offers the most …
-
New scanner detects 10 MCP manifest security risks without network access
A new static scanner, sentinel-scan-cli, has been developed to identify potential security vulnerabilities in Machine Configuration Protocol (MCP) manifests. The scanner employs ten heuristics to detect issues such as p…
-
New tool `mcpward` secures AI agent dependencies against MCP server contract changes
A new tool called `mcpward` has been developed to address the risks associated with changes in MCP (Model Communication Protocol) server contracts, which can silently break agent behavior. Unlike dependency managers tha…
-
AI agents vulnerable to malicious tool descriptions, new exploit reveals
A security vulnerability has been identified in how AI agents process tool descriptions, particularly within MCP servers. Malicious instructions can be embedded in the 'description' field of a tool manifest, which agent…
-
New tool prevents AI model rug-pulls by hashing tool definitions
A new method called mcp_pin.py has been developed to prevent "MCP tool drift," a security vulnerability where a server modifies a tool's description or inputSchema after a user has approved it. This technique, identifie…
-
Snyk's MCP server scanner executes code, raising security and data concerns
Snyk's agent-scan tool for MCP servers operates by executing them to retrieve tool descriptions, a process that raises security concerns when scanning untrusted configurations or in CI/CD pipelines. This method involves…