Pinboard (stevo)
https://pinboard.in/u:stevo/public/
recent bookmarks from stevoOverview | Warden2026-06-30T19:26:05+00:00
https://warden.sentry.dev/benchmarking
stevoai securityhttps://pinboard.in/u:stevo/b:dfce461ed80d/Centrally manage VS Code settings with policies2026-06-19T08:07:17+00:00
https://code.visualstudio.com/docs/enterprise/policies
stevovscode securityhttps://pinboard.in/https://pinboard.in/u:stevo/b:78ff9b7fef7a/Declare secrets once. Store them anywhere. | SecretSpec2026-06-16T17:56:46+00:00
https://secretspec.dev/
stevodevpro securityhttps://pinboard.in/u:stevo/b:95ebdc34d69f/Claude Code's GitHub Actions Vulnerability Lets Attackers Compromise Any Repository2026-06-03T20:20:56+00:00
https://cybersecuritynews.com/claude-codes-github-actions-vulnerability/
stevoai securityhttps://pinboard.in/u:stevo/b:7fc76ce3fde5/Infisical/agent-vault: A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.2026-05-26T07:00:50+00:00
https://github.com/Infisical/agent-vault
stevoai securityhttps://pinboard.in/u:stevo/b:63a5822ba07d/Claude Code's Network Sandbox Vulnerability Exposes User Credentials and Source Code2026-05-23T12:03:15+00:00
https://cybersecuritynews.com/claude-codes-network-sandbox-vulnerability/
stevoai securityhttps://pinboard.in/u:stevo/b:a1ffdea7533c/GitHub on X: "We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, org2026-05-20T06:14:57+00:00
https://x.com/github/status/2056884788179726685
stevosecurityhttps://pinboard.in/u:stevo/b:bf6964c8ed8f/The CTF scene is dead - kabir.au2026-05-17T08:44:08+00:00
https://kabir.au/blog/the-ctf-scene-is-dead
stevoai securityhttps://pinboard.in/u:stevo/b:4ed42273c530/lirantal/npq: safely install npm packages by auditing them pre-install stage2026-05-13T05:51:01+00:00
https://github.com/lirantal/npq
stevosecurity nodehttps://pinboard.in/u:stevo/b:c3f73e7dbdb1/Cloudflare Developers on X: "Multiple security vulnerabilities affecting React Server Components and Next.js have been disclosed. We strongly recommend updating your applications immediately. Cloudflare WAF managed rules already mitigate the disclosed den2026-05-07T22:56:20+00:00
https://x.com/CloudflareDev/status/2052467567588196703
stevosecurityhttps://pinboard.in/u:stevo/b:52e7d413270d/sagitz on X: "We achieved Remote Code Execution on GitHub - and got access to millions of repositories belonging to other users and organizations 🤯 All it took was a single `git push` Here's how we did it (CVE-2026-3854) 🧵⬇️ https://t.co/CrnBRDo2026-04-28T20:23:31+00:00
https://x.com/sagitz_/status/2049153195243372569
stevogithub securityhttps://pinboard.in/u:stevo/b:24ae8c1a8275/Securing the git push pipeline: Responding to a critical remote code execution vulnerability - The GitHub Blog2026-04-28T20:21:00+00:00
https://github.blog/security/securing-the-git-push-pipeline-responding-to-a-critical-remote-code-execution-vulnerability/
stevogithub securityhttps://pinboard.in/u:stevo/b:a0410a0ce981/Vercel April 2026 security incident | Vercel Knowledge Base2026-04-19T19:41:01+00:00
https://vercel.com/kb/bulletin/vercel-april-2026-security-incident
stevoai securityhttps://pinboard.in/u:stevo/b:17aaf93c8972/byteowlz/kyz: simple credentials storage for humans and agents2026-04-06T21:48:07+00:00
https://github.com/byteowlz/kyz
stevoai securityhttps://pinboard.in/u:stevo/b:61ad6f0e3ba1/ironsh/actions-demo2026-04-03T00:37:56+00:00
https://github.com/ironsh/actions-demo
stevogithub securityhttps://pinboard.in/u:stevo/b:5bf8d04b672a/Clément Dumas on X: "⚠️ Supply chain attack in progress: someone is squatting Anthropic-internal npm package names targeting people trying to compile the leaked Claude Code source. `color-diff-napi` and `modifiers-napi` — both registered today, sam2026-04-01T00:43:02+00:00
https://x.com/Butanium_/status/2039079715823128964
stevoai securityhttps://pinboard.in/u:stevo/b:87e17347e045/joelhooks/agent-secrets: 🛡️ Portable credential management for AI agents — Age encryption, session leases, killswitch2026-03-21T10:17:03+00:00
https://github.com/joelhooks/agent-secrets
stevoai securityhttps://pinboard.in/u:stevo/b:ba6db6b12d87/Designing AI agents to resist prompt injection | OpenAI2026-03-12T19:25:28+00:00
https://openai.com/index/designing-agents-to-resist-prompt-injection/
stevoai securityhttps://pinboard.in/u:stevo/b:254a22eaafab/dax on X: "we spoke to a company today who's security team is so concerned by ai code they're considering banning ai tools your first reaction might be "they're gonna get left behind" but if you are practical their concerns aren't invalid if you are a hug2026-03-10T15:30:05+00:00
https://x.com/thdxr/status/2029827114443137439
stevoai securityhttps://pinboard.in/u:stevo/b:550623a3b3db/Guillermo Rauch on X: "We've identified, responsibly disclosed, and confirmed 2 critical, 2 high, 2 medium, 1 low security vulnerabilities in Cloudflare's vibe-coded framework Vinext. We believe the security of the internet is the highest priority, especi2026-03-01T13:40:45+00:00
https://x.com/rauchg/status/2026864132423823499
stevoai securityhttps://pinboard.in/u:stevo/b:2e1ebd95accc/GitHub Copilot Exploited to Perform Full Repository Takeover via Passive Prompt Injection2026-02-26T18:30:28+00:00
https://cybersecuritynews.com/github-copilot-exploited/
stevoai copilot securityhttps://pinboard.in/u:stevo/b:51df79e67c6f/Michael Bargury on X: "@cline @adnanthekhan ok we got it figured out. `gtlhub-actions` attacked a second repo belonging to newrelic: newrelic/test-oac-repository this time they did it by naming their branch with a command injection so that when the workfl2026-02-19T15:45:19+00:00
https://x.com/mbrg0/status/2024175986695082329
stevoai securityhttps://pinboard.in/u:stevo/b:a876c75a5d2a/Erik Meijer on X: "In Code They Think; In Proof We Trust AI agents that use tools can be hijacked by prompt injection to exfiltrate sensitive data. Shortly after Anthropic launched Claude Cowork, their coding assistant with network access and file system2026-02-18T21:23:54+00:00
https://x.com/headinthebox/status/2023865517250081130
stevoai securityhttps://pinboard.in/u:stevo/b:364e327c4597/Unauthorized npm publish of Cline CLI cline@2.3.0 with modified postinstall script to install openclaw · Advisory · cline/cline2026-02-18T07:59:19+00:00
https://github.com/cline/cline/security/advisories/GHSA-9ppg-jx86-fqw7
stevoai securityhttps://pinboard.in/u:stevo/b:01b0f0381bad/0-Days red.anthropic.com2026-02-06T20:42:42+00:00
https://red.anthropic.com/2026/zero-days/
stevoai securityhttps://pinboard.in/u:stevo/b:2f6510057f1e/Exploit Cursor Agents to create persistent, distributed threats — ike.io2026-01-25T18:44:14+00:00
https://ike.io/open-a-folder-all-your-agents-are-mine/
stevoai securityhttps://pinboard.in/u:stevo/b:471464de5d98/The Normalization of Deviance in AI · Embrace The Red2025-12-29T23:04:07+00:00
https://embracethered.com/blog/posts/2025/the-normalization-of-deviance-in-ai/
stevoai securityhttps://pinboard.in/u:stevo/b:3e8fedda6a9c/Claude in Chrome: A Threat Analysis2025-12-29T17:11:02+00:00
https://labs.zenity.io/p/claude-in-chrome-a-threat-analysis
stevoai security webhttps://pinboard.in/u:stevo/b:7bd537ef91bc/how to hack discord, vercel and more with one easy trick - eva's site2025-12-19T14:24:42+00:00
https://kibty.town/blog/mintlify/
stevosecurityhttps://pinboard.in/u:stevo/b:d1cddc279816/Denial of Service and Source Code Exposure in React Server Components – React2025-12-11T23:45:08+00:00
https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
stevosecurity reacthttps://pinboard.in/u:stevo/b:d255fbac4dc5/lachlan2k/React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-551822025-12-05T12:59:19+00:00
https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc
stevoreact securityhttps://pinboard.in/u:stevo/b:66bb0407812e/React2Shell (CVE-2025-55182/CVE-2025-66478)2025-12-04T18:23:46+00:00
https://react2shell.com/
stevosecurity reacthttps://pinboard.in/u:stevo/b:329ec83c9619/React server actions RCE reproduction case - Amp2025-12-04T17:49:16+00:00
https://ampcode.com/threads/T-d372dd3f-ca0f-43bf-9214-2a23c148f578
stevoai react securityhttps://pinboard.in/u:stevo/b:f88b64e0e46e/Patch FlightReplyServer with fixes from ReactFlightClient by sebmarkbage · Pull Request #35277 · facebook/react2025-12-04T00:23:39+00:00
https://github.com/facebook/react/pull/35277/files
stevosecurity reacthttps://pinboard.in/https://pinboard.in/u:stevo/b:0e24fcb0b830/Critical Security Vulnerability in React Server Components – React2025-12-03T17:12:18+00:00
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
stevoreact securityhttps://pinboard.in/u:stevo/b:891fe058b76b/Amjad Masad on X: "NPM worm “Shai Hulud” is back and you can see a list of people getting pwned in realtime by refreshing this GitHub search page. When a user is infected the worm collects API keys and secrets and pushes them to a new repo on GitHub. 2025-11-24T21:13:17+00:00
https://x.com/amasad/status/1992999661649773006
stevonpm securityhttps://pinboard.in/u:stevo/b:33da23ad03ca/P1njc70r on X: "Friendly advice, Be careful when using Google's Antigravity IDE with sensitive data (API keys, secrets...) Attackers can hide instructions in code comments2025-11-20T08:37:51+00:00
https://x.com/p1njc70r/status/1991231714027532526
stevoai securityhttps://pinboard.in/u:stevo/b:aa22132ef3ce/anthropic-experimental/sandbox-runtime: A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.2025-11-16T18:25:23+00:00
https://github.com/anthropic-experimental/sandbox-runtime
stevoai sandbox security opencodehttps://pinboard.in/https://pinboard.in/u:stevo/b:89c160ea106d/coder/httpjail: HTTP(s) request filter for processes2025-11-15T11:14:57+00:00
https://github.com/coder/httpjail
stevoai securityhttps://pinboard.in/u:stevo/b:dd61e6974036/subroutinecom/workspace: Workspace orchestration for local development environments using docker-in-docker2025-11-14T20:59:34+00:00
https://github.com/subroutinecom/workspace
stevoagentic securityhttps://pinboard.in/u:stevo/b:7368c553a046/Disrupting the first reported AI-orchestrated cyber espionage campaign Anthropic2025-11-14T00:01:44+00:00
https://www.anthropic.com/news/disrupting-AI-espionage
stevosecurity aihttps://pinboard.in/u:stevo/b:8eb4d32099e6/npm hit by PhantomRaven supply chain attack • The Register2025-11-01T09:50:25+00:00
https://www.theregister.com/2025/10/30/phantomraven_npm_malware/
stevosecurityhttps://pinboard.in/u:stevo/b:498a016735dd/fr0gger/proximity: Proximity is a MCP security scanner powered with NOVA2025-10-31T08:06:14+00:00
https://github.com/fr0gger/proximity
stevosecurity mcphttps://pinboard.in/u:stevo/b:e82279aa03fa/Devs of VS Code extensions are leaking secrets en masse • The Register2025-10-16T11:38:50+00:00
https://www.theregister.com/2025/10/15/vc_code_extension_leaks/
stevosecurityhttps://pinboard.in/u:stevo/b:f0ce90de13a7/How I Almost Got Hacked By A 'Job Interview'2025-10-15T22:49:12+00:00
https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview
stevoai securityhttps://pinboard.in/u:stevo/b:a32d79a06567/A modern approach to preventing CSRF in Go2025-10-15T07:39:04+00:00
https://simonwillison.net/2025/Oct/15/csrf-in-go/
stevosecurity web golanghttps://pinboard.in/u:stevo/b:8278dab28cc9/Analyzing The Security Risks of OpenAI's AgentKit2025-10-09T18:56:15+00:00
https://labs.zenity.io/p/analyzing-the-security-risks-of-openai-s-agentkit
stevosecurity aihttps://pinboard.in/u:stevo/b:51d2d8a238e2/claude-code/.devcontainer at main · anthropics/claude-code2025-09-30T20:46:35+00:00
https://github.com/anthropics/claude-code/tree/main/.devcontainer
stevoClaude security aihttps://pinboard.in/u:stevo/b:9d4bb2320e99/Code Mode: the better way to use MCP2025-09-29T11:59:22+00:00
https://blog.cloudflare.com/code-mode/
stevomcp security aihttps://pinboard.in/u:stevo/b:42227769dfb5/CaMeL offers a promising new direction for mitigating prompt injection attacks2025-09-28T08:17:24+00:00
https://simonwillison.net/2025/Apr/11/camel/
stevoai prompt securityhttps://pinboard.in/u:stevo/b:bfdc5f80620c/Salesforce Agentforce tricked into leaking sales leads • The Register2025-09-27T09:21:18+00:00
https://www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/
stevoai securityhttps://pinboard.in/u:stevo/b:80b747528e3a/Full proxy bypass on any CloudFlare (or other proxy service) requests · Issue #57 · coder/httpjail2025-09-21T09:46:32+00:00
https://github.com/coder/httpjail/issues/57
stevosecurity aihttps://pinboard.in/u:stevo/b:091edd585a05/nikvdp/cco: A thin protective layer for Claude Code2025-09-20T21:14:05+00:00
https://github.com/nikvdp/cco
stevosecurity tool claude aihttps://pinboard.in/u:stevo/b:7d8bf3939dad/Fine-grained HTTP filtering for Claude Code2025-09-20T21:09:02+00:00
https://ammar.io/blog/httpjail
stevotool security agentic aihttps://pinboard.in/u:stevo/b:15eef7b4177a/The lethal trifecta for AI agents: private data, untrusted content, and external communication2025-09-20T20:47:22+00:00
https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/?ref=ghuntley.com
stevoai security mcphttps://pinboard.in/https://pinboard.in/u:stevo/b:8373b92c2048/Hacker slips malicious 'wiping' command into Amazon's Q AI coding assistant - and devs are worried | ZDNET2025-09-20T20:47:05+00:00
https://www.zdnet.com/article/hacker-slips-malicious-wiping-command-into-amazons-q-ai-coding-assistant-and-devs-are-worried/?ref=ghuntley.com
stevoai securityhttps://pinboard.in/https://pinboard.in/u:stevo/b:cda15c8cdc83/Trivy2025-09-08T10:32:53+00:00
https://trivy.dev/latest/
stevosecurityhttps://pinboard.in/https://pinboard.in/u:stevo/b:67fa249846a2/anti-patterns and patterns for achieving secure generation of code via AI2025-09-05T12:57:21+00:00
https://ghuntley.com/secure-codegen/
stevosecurity agentic aihttps://pinboard.in/u:stevo/b:f61c66c075ce/SawyerHood/ufiaw: An npm package that will turn your coding agents into waifus when installed2025-08-31T00:15:35+00:00
https://github.com/SawyerHood/ufiaw
stevofunny security aihttps://pinboard.in/u:stevo/b:b3a533d1bdaf/Agentic ProbLLMs - The Month of AI Bugs 20252025-08-30T11:30:10+00:00
https://monthofaibugs.com/
stevoai securityhttps://pinboard.in/u:stevo/b:79c07cfd1ffe/Nx NPM packages poisoned in AI-assisted supply chain attack • The Register2025-08-30T09:21:39+00:00
https://www.theregister.com/2025/08/27/nx_npm_supply_chain_attack/
stevosecurity aihttps://pinboard.in/u:stevo/b:2dbb836ec2be/Safeguarding VS Code against prompt injections - The GitHub Blog2025-08-25T20:39:02+00:00
https://github.blog/security/vulnerability-research/safeguarding-vs-code-against-prompt-injections/
stevoai GitHub securityhttps://pinboard.in/u:stevo/b:10966dce282a/zak.eth on X: "🚨 UPDATE: Full Post-Mortem On Cursor Security Incident In yesterday’s thread I explained how I got drained after installing a malicious extension in @cursor_ai. This is the deeper dive into what I found, what I did, and how you can avo2025-08-18T19:41:41+00:00
https://x.com/0xzak/status/1955655184522371361
stevosecurity mcp aihttps://pinboard.in/u:stevo/b:255596fb1b2f/Johann Rehberger on X: "👉 Episode 11: Claude Code - Data Exfiltration with DNS 💥 I compromised Claude Code via prompt injection, read sensitive files from the machine, and exfiltrated the data via DNS 😈 🙌 Happy to share this high-severity vuln2025-08-17T10:16:17+00:00
https://x.com/wunderwuzzi23/status/1954905132371788115
stevosecurity aihttps://pinboard.in/u:stevo/b:c5f9b59a97e3/Sloppy AI defenses take cybersecurity back to the 1990s, researchers say | SC Media2025-08-13T19:04:35+00:00
https://www.scworld.com/news/sloppy-ai-defenses-take-cybersecurity-back-to-the-1990s-researchers-say
stevosecurity aihttps://pinboard.in/u:stevo/b:f0f019be754c/Agentic AI: On Evaluations | Towards Data Science2025-08-09T23:11:22+00:00
https://towardsdatascience.com/agentic-ai-evaluation-playbook/
stevomcp security aihttps://pinboard.in/u:stevo/b:4dc1bcaeb5fa/yarrick/iodine: Official git repo for iodine dns tunnel2025-08-09T22:29:17+00:00
https://github.com/yarrick/iodine
stevotools securityhttps://pinboard.in/u:stevo/b:fe8ffcf82264/Michael Bargury @ DC on X: "next. we hijacked cursor via jira mcp by submitting a support ticket cursor harvests and exfiltrate all creds from your dev machine and then reports back to the dev that "the 2-hour downtime that affected user transactions has2025-08-09T22:06:32+00:00
https://x.com/mbrg0/status/1953932780855013682
stevomcp ai securityhttps://pinboard.in/u:stevo/b:ea1621f07607/mbg @ BH / DC on X: "we hijacked microsoft's copilot studio agents and got them to spill out their private knowledge, reveal their tools and let us use them to dump full crm records these are autonomous agents.. no human in the loop #DEFCON #BHUSA @tamiri2025-08-09T09:17:50+00:00
https://x.com/mbrg0/status/1953815729947447770
stevoai security mcphttps://pinboard.in/u:stevo/b:3c4f70865477/The MCP Security Survival Guide: Best Practices, Pitfalls, and Real-World Lessons | Towards Data Science2025-08-08T10:16:55+00:00
https://towardsdatascience.com/the-mcp-security-survival-guide-best-practices-pitfalls-and-real-world-lessons/
stevosecurity mcp aihttps://pinboard.in/u:stevo/b:499d581b37fb/