MCP on My Battles With Technology https://blog.shellnetsecurity.com/tags/mcp/ Recent content in MCP on My Battles With Technology Hugo -- 0.151.2 en Fri, 18 Sep 2026 09:00:00 -0500 The CVE List Isn't the Point: Mapping Blast Radius in AI Infrastructure with agent-bom https://blog.shellnetsecurity.com/posts/2026/agent-bom-ai-blast-radius/ Fri, 18 Sep 2026 09:00:00 -0500 https://blog.shellnetsecurity.com/posts/2026/agent-bom-ai-blast-radius/ A CVE in a random package is background noise. The same CVE reachable from an AI agent with a live API key in scope is an incident. agent-bom is built to tell you which one you're looking at.