펜리젠트 헤더

해킹 연구소

WorkOS ARTEX incident: AI agent scope and API exposure, illustrated by glass trust boundaries.

WorkOS ARTEX Incident: AI Agent Scope and API Exposure

자세히 보기

Three independent audit rows cover package source, persistent instruction differences and effective provider routing settings.

Prompt Adware: Audit AI Coding Tool Instructions and Cleanup

자세히 보기

A threat brief is mapped to an owned asset, then to separate control and runtime evidence checks; reported activity does not establish compromise.

Cloudflare Zero Wire: Turn Vulnerability Intelligence into Asset Evidence

자세히 보기

Source revision, build artifact and runtime deployment converge on a review classified as validated, not reproduced or inconclusive.

Arnica Agentic Pen Testing: Verify SAST Findings Without Losing Runtime Context

자세히 보기

A layered verification path follows header construction to an HTTP/1.1 upstream and request boundary evidence; injection alone does not prove desync.

CRLF-Powered Desync: Verify HTTP Request Header Injection Safely

자세히 보기

An exposed secret maps to an application identity and issued tokens, with separate actions to revoke the secret, review access and check token expiry.

ARTEX and Exposed Secrets: Revocation and Evidence Checks

자세히 보기

A conceptual review loop connects a test scenario, a release version and its result evidence.

Escape Continuous AI Pentesting: Evaluate Coverage, Ownership and Retest Evidence

자세히 보기

Two independent checks: authorization for users calling an app and the allowed outbound source for app calls to Shopify Admin API.

Shopify App IP Allowlists: Serverless Setup, Deadlines and 403 Verification

자세히 보기

Inspector 2.14.0 fixes the app frame, input handling and schema issues. Legacy 1.0.4 addresses the schema-validation stall among these three advisories.

MCP Inspector Security Update: What 2.14.0 Fixes and How to Verify Your Setup

자세히 보기

MCP server pre-connection audit covering publisher source, maintenance lifecycle, pinned version and minimum agent permissions.

MCPhantom and Deprecated MCP Servers: What to Audit Before Connecting an AI Agent

자세히 보기

펜리젠트 푸터

Korean