Blog.

Threat Alert: Massive NPM Supply-Chain Compromise

Mustafa Naamneh

September 9, 2025

September 9, 2025

-

4

min read

What is MCP? The Universal Connector for AI Explained

September 5, 2025

September 5, 2025

-

min read

External Data Sources + MCP Servers = Potential New Risks

August 14, 2025

August 15, 2025

-

5

min read

The Denylist Delusion: Cursor’s Auto-Run Leaves Agentic AI Wide Open

Mustafa Naamneh and Micah Gold | Backslash Research Team

July 21, 2025

July 21, 2025

-

5

min read

Introducing the Vibe coding security threat model!

July 7, 2025

July 13, 2025

-

3

min read

Threat Research: Hundreds of MCP Servers Vulnerable to Abuse

Mustafa Naamnih and Jonathan Ginzburg | Backslash Research Team

June 25, 2025

June 25, 2025

-

5

min read

Simulating a Context-Poisoning Vulnerable MCP Server: A POC

Micah Gold | Backslash Security Research Team

June 24, 2025

June 24, 2025

-

min read

Introducing The Backslash MCP Server Security Hub

June 16, 2025

June 16, 2025

-

4

min read

Harnessing Prompt Rules for Secure Code Generation

June 11, 2025

June 11, 2025

-

5

min read

Guilty, Innocent, or Just Risky? Why MCP Server Security Verdicts Are Hard

June 6, 2025

June 5, 2025

-

5

min read

Top 10 Risks of Using MCP Servers in IDEs

June 4, 2025

June 4, 2025

-

4

min read

Can AI “Vibe Coding” Be Trusted? It Depends…

April 24, 2025

May 26, 2025

-

5

min read