OWASP ASI07 Explained: Insecure Inter-Agent Communication
OWASP ASI07 (Insecure Inter-Agent Communication) explained: how agents trust each other too much, relay malicious instructions, and amplify prompt injection.
ReadAdversarial & AI Security.
AI security, MCP server reviews, and red-team write-ups across smart contracts, dApps, and Web2 infrastructure.
Showing 12 of 20
OWASP ASI01 Explained: AI Agent Goal Hijacking
OWASP ASI01 (Agent Goal Hijack) explained: how prompt injection redirects AI agent objectives. Direct, indirect, and tool-mediated patterns with mitigations.
Read
OWASP ASI05 Explained: AI Agent RCE Patterns
OWASP ASI05 (Unexpected Code Execution) explained: how agent-generated code and tool composition produce RCE in agentic systems. Real CVEs and mitigations.
Read
The Web2 blind spot: Why audited smart contracts get hacked
Bybit, BadgerDAO, Curve — all audited, all drained off-chain. How DNS hijacks, CDN compromises, and signing-flow attacks bypass smart contract audits.
Read
AI Agent Outbound Authority: Audit Checks
Why email, messaging, and webhook tools need destination-level controls in AI agents. Practical audit checks for exfiltration and approval bypass.
Read
Indirect prompt injection: the Web3 agent attack chain
How indirect prompt injection drains Web3 agent wallets, poisons AI audits, and abuses MCP servers. Bankrbot case study and the auditor's 12-point checklist.
Read
AI Agent Approval Bypass: Audit Checks
Why human approval fails in AI agents when the model still controls risky parameters. Audit checks for coding agents, long-lived agents, and Agentic DeFi.
Read
Supply Chain Attacks in Web3 — From NPM to Protocol Exploits
Complete guide to Web3 supply chain attacks with 5 vectors, real incidents, and actionable checklist.
Read
JailBreak Technique: Misguided Attention Using Trolley Problem
Learn the Act of Jailbreaking an LLM using Paradox-Inspired Techniques
Read
Social Engineering Models: The Polite Approach
Discover how LLMs Threat detection rate can be reduced for Successful Injection
Read
Why AI security needs pentesting, red teaming, and audits together
Pentesting finds bugs, red teaming tests defenses, audits prove compliance. Learn why AI security demands all three integrated into one TEVV lifecycle.
Read
AI trading bot security: 5 critical attack vectors in DeFi
Five systemic vectors targeting AI trading bots — adversarial ML, data poisoning, prompt injection, API exploits, supply chain compromise — with strategic mitigation.
Read