SANS Stormcast Tuesday, April 8th:

XORsearch: Searching With Regexes

Didier explains a workaround to use his tool XORsearch to search for regular expressions instead of simple strings.

https://isc.sans.edu/diary/XORsearch%3A%20Searching%20With%20Regexes/31834

MCP Security Notification: Tool Poisoning Attacks

Invariant labs summarized a critical weakness in the Model Context Protocol (MCP) that allows for "Tool Poisoning Attacks." Many major providers such as Anthropic and OpenAI, workflow automation systems like Zapier, and MCP clients like Cursor are susceptible to this attack

https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-attacks

Making :visited more private

Google Chrome changed how links are marked as visited . This new partitioning scheme was introduced to improve privacy. Instead of marking a link as visited on any page where it is displayed, it is only marked as visited if the user clicks on the link while visiting the particular site where the link is displayed.

https://developer.chrome.com/blog/visited-links