01▲[tl;dr sec] #336 - Autonomous Vulnerability Hunting, GuardDog 3.0, Are Bug Bounties Cooked? tldrsec.com Security newsletter issue on AI vuln hunting, GuardDog 3.0, bug bounty economics, and assorted supply-chain/RAT/jailbreak bits.ai-securitybug-bountycloud-securitydetection-engineeringlinkedinmacosmalwareprompt-injectionsupply-chainvulnerability-huntingwindows1 pt/iimai/3 days ago/1 comment
02▲[tl;dr sec] #335 - Prompt Injection as Role Confusion, PHP Ecosystem Security, New MCP Spec tldrsec.com Prompt injection, apparently, is role confusion, in a newsletter that also hits PHP hardening and the new MCP spec.ai-securityblockchaincloud-securitycryptanalysisecosystem-securitylinkedinllm-securitymcpprivacyprompt-injectionsupply-chain2 pts/anyaw/9 days ago/discuss
03▲[tl;dr sec] #334 - Thinkst's Package Proxy, OpenAI Daybreak, AI Agents & Canaries tldrsec.com Security roundup: package proxies, AI-agent canary benchmarks, and OpenAI's Daybreak/Codex updates, plus the usual cloud mess.agentsai-securityappsecblue-teamcanariescloud-securitylinkedinsupply-chain0 pts/pavelk/16 days ago/2 comments
04▲[tl;dr sec] #332 - I've Joined OpenAI, fwd:cloudsec, AWS Well Architected Supply Chain Security tldrsec.com What did tl;dr sec #332 pick out this week? OpenAI hire, AWS supply-chain advice, OIDC/Lambda abuse, and AI threat notes.ai-securityappsecawscloud-securitygithub-actionsidentitylambdalinkedinllmoidcsecretsstatic-analysissupply-chainthreat-intelligence0 pts/max/29 days ago/3 comments