|
You are here |
smagin.fyi | ||
| | | | |
www.vlent.nl
|
|
| | | | | ||
| | | | |
timtech.blog
|
|
| | | | | Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies. | |
| | | | |
www.sjoerdlangkemper.nl
|
|
| | | | | This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses. | |
| | | | |
www.pillar.security
|
|
| | | [AI summary] The article discusses the Model Context Protocol (MCP), an open standard for AI assistants to interact with external tools and services, while highlighting its security risks and the need for robust security measures to protect against vulnerabilities like token theft, server compromise, and prompt injection attacks. | ||