The Commoness·4d agoThe MCP Tool Was Safe Yesterday. Today, It Was Sending Your Emails to Someone Else.What happens when a trusted AI tool turns against you? A real MCP supply-chain incident reveals why security cannot stop at installation.A response icon1A response icon1
The Commoness·Nov 3The AI Agent Finished Its Task. So Why Did It Access Something It Was Never Asked to?A real Microsoft Copilot vulnerability reveals why successful AI automation doesn’t always mean secure execution — and what detection…
The Commoness·Oct 27HackerBot-Claw: How an AI-Powered Attacker Turned GitHub Automation Into a Security Threat and How…From GitHub Actions exploitation to AI-assisted threat hunting: understanding the attack, detecting suspicious behavior, and exploring the…
The Commoness·Oct 20AI in Cybersecurity: A Beginner’s Guide to Claude Code, MCP & AI Agents-6Building a Detection Knowledge Base
The Commoness·Oct 6AI in Cybersecurity: A Beginner’s Guide to Claude Code, MCP & AI Agents-5Giving Claude Detection Engineering Knowledge with MCP Resources
The Commoness·Sep 28Building MCP Security Detections: From Request Mismatches to Revoked SubscriptionsHow I used AI-assisted development, synthetic audit events, and Sigma, KQL, and SPL to build and test three focused detections.
The Commoness·Sep 25CyberSecurity Basic Concepts-4Risk Management continuation : basically on the terminology
The Commoness·Sep 22AI in Cybersecurity: A Beginner’s Guide to Claude Code, MCP & AI Agents-4Quick Recap: MCP to PluginsA response icon1A response icon1
The Commoness·Sep 15AI in Cybersecurity: A Beginner’s Guide to Claude Code, MCP & AI Agents-3Quick Recap: Skills vs Commands vs Subagents vs Hooks vs MCP