# Posts by tag 'security' — Liran Tal AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks. Canonical: https://lirantal.com/tag/security [![](/_astro/gemini-cli-invisible-unicode-skill-injection.AW0ivLkB_Z2nFK4g.png) Jul 17, 2026 12 min read ### Invisible Unicode Can Hijack Gemini CLI Agent Skills I disclosed a Gemini CLI prompt injection where invisible Unicode tag characters in SKILL.md caused the agent to run a hidden command. Google closed the report as out of scope because the workspace was trusted and YOLO mode was enabled.](/blog/gemini-cli-invisible-unicode-skill-injection) * [security](/tag/security) * [ai agents](/tag/ai-agents) * [gemini cli](/tag/gemini-cli) * [prompt injection](/tag/prompt-injection) * [unicode](/tag/unicode) [![](/_astro/is-prompt-injection-unsolvable-problem-ai.CNHPYK7E_1xccHK.png) May 9, 2026 16 min read ### Is Prompt Injection an Unsolvable Problem in AI? Prompt injection is not a bug you patch but an architectural limit baked into how LLMs process language. This post traces the problem from Gödel and Hofstadter to modern jailbreaks, agent skill supply chains, and why defenders must shift from elimination to survivability.](/blog/is-prompt-injection-unsolvable-problem-ai) * [security](/tag/security) * [ai](/tag/ai) * [prompt injection](/tag/prompt-injection) * [llm](/tag/llm) * [ai agents](/tag/ai-agents) [![](/_astro/llm-secure-code-review-not-solved.GrIIxSzP_1sXo2o.png) Apr 20, 2026 12 min read ### LLM Security Automation Isn’t a Drop-In Scanner Yet An LLM Security Scanning and Review is a strong assist but a weeak gate. Why a \`/security-review\` slash command or agent harness is not a drop-in replacement for deterministic scanners yet: nondeterminism, confabulation, latency, cost, exploitability of generated code, and findings variance—grounded in how agent loops work and what BaxBench measures.](/blog/llm-security-automation-isnt-a-drop-in-scanner-yet) * [security](/tag/security) * [llm](/tag/llm) * [code review](/tag/code-review) * [sast](/tag/sast) * [machine learning](/tag/machine-learning) [![](/_astro/mcp-server-security-evaluation-framework-logo.CZi2e61B_FchLG.png) Oct 7, 2025 4 min read ### A Proposed Evaluation Framework for MCP Server Security How do you securely integrate a new MCP Server into Cursor or other agentic workflows? what security practices do you consider to evaluate the risks?](/blog/mcp-server-security-evaluation-framework) * [ai](/tag/ai) * [mcp](/tag/mcp) * [security](/tag/security) [![](/_astro/mcp-security-threats-and-risks.akMmTKlb_24MVFf.png) Oct 5, 2025 6 min read ### Evaluation Framework for MCP Security Threats and Risks How to evaluate and categorize security threats and risks associated with Model Code Protocol (MCP) in light of recent security incidents.](/blog/evaluation-framework-for-mcp-security-threats-and-risks) * [ai](/tag/ai) * [MCP](/tag/mcp) * [security](/tag/security) [![](/_astro/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis.DDqXsmRM_Z1BA0KJ.jpg) Oct 3, 2025 4 min read ### The Cursor Agentic Jira MCP Attack Explained with Toxic Flow Analysis A breakdown of the Cursor + Jira MCP 0-Click attack, how it was exploited, and why developers are at the center of it all. Understanding MCPs, Toxic Flows, and the implications for AI-assisted coding environments.](/blog/the-cursor-jira-mcp-attack-explained-with-toxic-flow-analysis) * [ai](/tag/ai) * [MCP](/tag/mcp) * [security](/tag/security) [![](/_astro/ls-mcp-detects-env-var-risks.BejA_byN_2i4wK2.jpg) Sep 9, 2025 3 min read ### Secure Your MCP Servers with Environment Variable Risk Assessment Learn how to enhance the security of your MCP server configurations by using the latest \`ls-mcp\` tool to detect and categorize credential risks in environment variables.](/blog/secure-mcp-env-var-risk-assessment) * [mcp](/tag/mcp) * [security](/tag/security) * [environment variables](/tag/environment-variables) [![](/_astro/mcp-server-security-evaluation-framework.DZIWGiQo_7Enkv.jpg) Sep 1, 2025 4 min read ### A Proposed MCP Server Security Evaluation Framework With great MCP power comes great MCP responsibility and you should be prepared to evaluate the security of your MCP server implementation and MCP adoption in your AI agents.](/blog/mcp-server-security-evaluation-framework) * [mcp](/tag/mcp) * [security](/tag/security) * [ai](/tag/ai) * [model context protocol](/tag/model-context-protocol) [![](/_astro/plan-dont-execute-agentic-workflows-in-zero-trust-environments.CUXdPFbf_Zg2tcG.jpg) Aug 19, 2025 3 min read ### Plan, Don't Execute: Agentic Workflows in Zero Trust Environments How zero-trust environments can leverage AI agents and agentic workflows without compromising security and trust.](/blog/plan-dont-execute-agentic-workflows-in-zero-trust-environments) * [ai](/tag/ai) * [security](/tag/security) [![](/_astro/nodejs-poor-auth-express-conventions.CVHAjPGW_Z27bPDE.jpg) May 3, 2024 5 min read ### Poor Express Authentication Patterns in Node.js and How to Avoid Them Tired of seeing poor authentication patterns in Node.js applications and Express code examples? Here's a guide on how to avoid them and what to do instead](/blog/poor-express-authentication-patterns-nodejs) * [nodejs](/tag/nodejs) * [express](/tag/express) * [authentication](/tag/authentication) * [security](/tag/security) [![](/_astro/photo-1516849677043-ef67c9557e16.fC1eXFFa_3H0Yw.jpg) Apr 27, 2023 2 min read ### Disclosing a local file inclusion vulnerability in xmlhttprequest library I found a Local File Inclusion (LFI) security vulnerability in xmlhttprequest library but it's still unfixed.](/blog/local-file-inclusion-in-xmlhttprequest-library) * [security](/tag/security) * [vulnerability](/tag/vulnerability) * [advisory](/tag/advisory) * [cve](/tag/cve) * [xmlhttprequest](/tag/xmlhttprequest) * [local-file-inclusion](/tag/local-file-inclusion) * [lfi](/tag/lfi) [![](/_astro/photo-1553987084-4c3aebbc686e.DpeFAG9W_Z1fvFtg.jpg) Apr 16, 2023 3 min read ### Disclosing uncontrolled resource consumption in xmlhttprequest library proof-of-concept showing a denial of service vulnerability in a Node.js web server if it uses the xmlhttprequest library to make outgoing HTTP requests](/blog/disclosing-uncontrolled-resource-consumption-in-xmlhttprequest-library) * [security](/tag/security) * [vulnerability](/tag/vulnerability) * [advisory](/tag/advisory) * [cve](/tag/cve) * [xmlhttprequest](/tag/xmlhttprequest) * [denial of service](/tag/denial-of-service) * [dos](/tag/dos) * [uncontrolled resource consumption](/tag/uncontrolled-resource-consumption) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) Mar 12, 2015 1 min read ### Prevent clickjacking on Drupal and other Apache web applications Updating Apache server configuration to use mod\_headers to prevent clickjacking security issues](/blog/2015-03-16) * [security](/tag/security) * [http](/tag/http) * [clickjacking](/tag/clickjacking) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) Mar 9, 2015 1 min read ### Apache Obfuscation by disabling trace and server tokens Preventative measures to mitigate leaking the server software running](/blog/2015-03-09) * [security](/tag/security) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) May 8, 2014 2 min read ### Reviewing book – Learning Pentesting for Android Devices Getting started with penetration testing for Android devices](/blog/2014-05-08) * [pentesting](/tag/pentesting) * [security](/tag/security) * [android](/tag/android) * [writing](/tag/writing) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) Oct 28, 2013 1 min read ### Advanced Poll 6.x versions – XSS Vulnerability Disclosing a Cross-site Scripting vulnerability in the Advanced Poll module for Drupal.](/blog/2013-10-28) * [drupal](/tag/drupal) * [security](/tag/security) * [xss](/tag/xss) * [bugbounty](/tag/bugbounty) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) May 9, 2010 1 min read ### daloRADIUS operators handling change RBAC, ACLs, operators, groups, and other access control related changes in daloRADIUS](/blog/2010-05-09) * [daloradius](/tag/daloradius) * [security](/tag/security) * [auth](/tag/auth) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) Jul 14, 2006 1 min read ### nessus3 install issue on ubuntu how to fix Nessus3 and its missing dependency](/blog/2006-07-14) * [nessus](/tag/nessus) * [security](/tag/security) * [pentesting](/tag/pentesting) * [linux](/tag/linux) * [ubuntu](/tag/ubuntu) [![](/_astro/photo-1468956398224-6d6f66e22c35.BePqp3CW_Zj88Tk.jpg) Jul 10, 2006 1 min read ### MythEmail Plugin MythEmail plugin for the glorious MythTV all-around streamer and home media entertainment system](/blog/2006-07-10) * [nessus](/tag/nessus) * [security](/tag/security) * [pentesting](/tag/pentesting) * [linux](/tag/linux) * [ubuntu](/tag/ubuntu)