Poking new holes with Flash Crossdomain Policy files. Very scary attack: if you can upload a file to a server, you can probably open it up to XSRF.
Recent articles
- Video: Building a tool to copy-paste share terminal sessions using Claude Code for web - 23rd October 2025
- Dane Stuckey (OpenAI CISO) on prompt injection risks for ChatGPT Atlas - 22nd October 2025
- Living dangerously with Claude - 22nd October 2025