News for hackers. Stuff that matters.

A comment on ANSI escape injection in MCP servers: Hidden from humans, visible to AI.

Re:ANSI escape injection in MCP servers: Hidden from humans,... by iku on Thursday July 23, 2026 @09:46AM (#49021536)
May I ask, what is DAST exactly? The report doesn't seem to define it, nor does it provide a link to any definition or detail page, not even an abreviation expansion. Is that Dynamic application security testing?

[1] https://en.wikipedia.org/wiki/Dynamic_application_security_t...

[ Parent | on HN ]
Re:ANSI escape injection in MCP servers: Hidden from humans,... by smallerize on Thursday July 23, 2026 @09:54AM (#49021633)
It took a little poking around, but yes https://docs.brightsec.com/docs/introducing-to-bright
[ Parent | on HN ]
Re:ANSI escape injection in MCP servers: Hidden from humans,... by xyzzy_plugh on Thursday July 23, 2026 @09:55AM (#49021662)
Correct, it's the counterpart to SAST.
[ Parent | on HN ]