Amine Raji

I’m Amine Raji, founder of Molntek.com and a specialist in AI security for organizations deploying agentic and LLM-powered systems.

Apr 29, 2026

•

3 min read

[AI Sec Intel] #10 — MCP servers trust every caller by default. Here's the checklist that closes the gap.

New research confirms MCP servers trust every request by default. Here's what to do before it becomes someone else's exploit

Amine Raji

Apr 21, 2026

•

3 min read

[AI Sec Intel] #9 — Eight agent exploits in Q1. 200k vulnerable MCP servers and Anthropic won't fix the protocol.

A persistent context window is a persistent attack surface. Eight production incidents this quarter prove it.

Amine Raji

Apr 14, 2026

•

6 min read

[AI Sec Intel] #8 — Closed Agent Harness = threat model blind spot

I built a 3-agent coding system this week. First control I added: repo isolation on the write-capable agent.

Amine Raji

Apr 8, 2026

•

5 min read

[AI Sec Intel] #7 — 97% expect an AI agent breach this year

But only 6% of the security budgets cover it

Amine Raji

Mar 31, 2026

•

7 min read

[AI Sec Intel] #6 — Trivy compromised. LiteLLM backdoored. Your CI pipeline is the new attack surface.

The payload ran as a systemd service. The Trivy scan still returned green. Nobody noticed.

Amine Raji

Mar 24, 2026

•

7 min read

[AI Sec Intel] #5 — 28 out of 30 agent projects. Zero per-agent identity. Zero revocation.

The .env file is not an identity system. The ecosystem just forgot. Plus a CVSS 9.8 with no patch.

Amine Raji

Mar 16, 2026

•

5 min read

[AI Sec Intel] #4 - Three attack papers dropped this week. All point to the same architectural flaw.

99% guardrail bypass, 95% RAG poisoning, and the one fix that addresses both.

Amine Raji

Mar 9, 2026

•

6 min read

[AI Security Intelligence] #3 — I Red-Teamed My Own Agent Stack, PleaseFix Hijacks Browsers Through Calendar Invites

One line in a Dockerfile stopped three containers, exfiltrated a full inventory, and the AI reported: “The image is safe to use.”

Amine Raji

Mar 2, 2026

•

17 min read

[AI Security Intelligence] #2 — Claude Code Supply Chain RCE, AI-Powered FortiGate Blitz, Infostealers Now Harvest AI Agent Souls

When your AI coding assistant's config files become an attack vector, a script kiddie with ChatGPT breaches 600 firewalls, and malware evolves to steal your agent's entire identity

Amine Raji

Feb 23, 2026

•

11 min read

[AI Security Intelligence] #1 — DockerDash MCP Takeover, vLLM CVSS 9.8 RCE, Cisco State of AI Security 2026

When image metadata becomes remote code execution, your AI inference servers are pre-auth targets, and Cisco confirms lab attacks have gone live.

Amine Raji