Security
4 articles
How ZF1 Users Log Into Symfony With Cross-Framework Authentication
During a Strangler Fig migration, both frameworks need to recognize the same user. Here is how a Symfony authenticator read Zend_Auth session data to create seamless single sign-on across ZF1 and Symfony — and why it was the first bridge component to be removed.
Anatomy of Indirect Prompt Injection Hidden in Plain Text
Twenty-two techniques, three delivery methods, and one structural weakness: AI assistants cannot distinguish instructions from data. Here is how attackers exploit that, and what works as a defense.
Clinejection: How a Prompt Injection Infected 4,000 Terminals
How a single GitHub issue turned an AI triage bot into an entry point for a supply chain attack, step by step.
The Tenant You Suspended Is Still Running Jobs
A status field changed. A boolean next to it didn't. The HTTP layer enforced the difference — nothing else did.