Kiell Tampubolon

Security Engineer & Technical Writer | AI Security, MCP, Developer Security & Automation

Singapore Joined on Apr 21, 2026 https://www.kielltampubolon.id/

Pinned

Kiell Tampubolon

Sep 23

My AI agent said we were under attack. The logs said otherwise.

#discuss #ai #security

5 min read

Kiell Tampubolon

Sep 22

The LiteLLM Supply Chain Backdoor: What 3 Hours Means for Your AI Agent Gateway

#security #ai #llm #infosec

5 min read

Kiell Tampubolon

Sep 18

A fake MCP server spent three months earning trust. The tells were there

#security #aiagents #mcp #supplychain

3 min read

Kiell Tampubolon

Sep 14

My Scanner Passed Until I Built a Harness That Lied to It on Purpose

#security #python #devtools #testing

3 min read

Kiell Tampubolon

Sep 11

A happy-path MCP demo proves almost nothing about tenant isolation

#mcp #security #ai #python

3 min read

Kiell Tampubolon

Oct 4

My agents kept forgetting each other, so I wrote a protocol about it

#ai #python #opensource #programming

7 min read

Want to connect with Kiell Tampubolon?

Create an account to connect with Kiell Tampubolon. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Kiell Tampubolon

Oct 4

FortiMail Zero-Day: 3 Checks Before You Trust the Patch

#discuss #cybersecurity #fortinet #security

7 min read

Kiell Tampubolon

Oct 4

Math.random Signed the Cookies: 12 Requests to HFS Admin

#discuss #node #koa #security

8 min read

Kiell Tampubolon

Oct 4

AI Agent Chained 2 Zero-Days to Root in Seconds: 4 Checks

#discuss #security #zammad #aiagents

6 min read

Kiell Tampubolon

Oct 4

Threat Modeling the Model Context Protocol: Securing Agentic Tools with mcpscan

#security #ai #mcp #python

5 min read

Kiell Tampubolon

Oct 4

9.8 Windows DNS RCE: 3 Triage Checks Before It Repeats SigRed

#discuss #python #dns #security

6 min read

Kiell Tampubolon

Oct 4

Mullvad Public DNS Shuts Down Nov 2: 5 Checks I Ran First

#discuss #python #dns #privacy

8 min read

Kiell Tampubolon

Oct 4

Shopify Left React Native: 4 Questions Before You Follow

#discuss #mobile #reactnative #engineering

6 min read

Kiell Tampubolon

Oct 4

I Traced CrewAI's Sandbox CVE: 9 Names Missed the Runtime

#discuss #python #crewai #security

8 min read

Kiell Tampubolon

Oct 4

Artifactory Is Under Active Attack: 3 Checks in 30 Minutes

#discuss #devops #artifactory #security

8 min read

Kiell Tampubolon

Oct 4

MCP Servers Had a Rough 48 Hours: 4 Unauthenticated CVEs

#discuss #python #mcp #security

9 min read

Kiell Tampubolon

Oct 4

I Traced the Jev Repo Wave: 5 Checks Before You Star It

#discuss #programming #github #opensource

8 min read

Kiell Tampubolon

Oct 4

Codex Sandbox Escape: 3 Checks Before You Open Another Repo

#discuss #node #codex #security

8 min read

Kiell Tampubolon

Oct 4

I Traced 29 CVEs in One MCP Server to 4 Root Causes

#discuss #python #mcp #security

10 min read

Kiell Tampubolon

Oct 4

NetScaler RCE: 3 Checks Before Your Next Patch Window

#discuss #devops #netscaler #security

5 min read

Kiell Tampubolon

Oct 4

I Traced Unbound's DNSSEC Heap Overflow: 4 Checks to Run

#discuss #devops #dns #security

7 min read

Kiell Tampubolon

Oct 4

I Traced AgentCore's Package Injection Bug Through 2 Fixes

#discuss #python #aws #security

6 min read

Kiell Tampubolon

Oct 4

I Traced vm2's 9.5 Sandbox Escape to a Missing Regex Boundary

#discuss #node #vm2 #security

6 min read

Kiell Tampubolon

Oct 4

I spent 4 hours getting a Copilot Studio agent to read Entra audit logs. Here is what actually broke.

#microsoft #copilotstudio #security #automation

8 min read

Kiell Tampubolon

Oct 4

Read-Only Postgres MCP Servers Fail With 1 SQL Keyword

#discuss #python #mcp #security

6 min read

Kiell Tampubolon

Oct 4

I Traced MaxKB's 10.0 CVE Through the Advisory and the Code

#discuss #python #maxkb #security

8 min read

Kiell Tampubolon

Oct 4

I Read Claude's Biology Discovery as a Pipeline: 5 Lessons

#discuss #python #aiagents #engineering

6 min read

Kiell Tampubolon

Oct 4

I Audited the MCP SDK OAuth Fix: 3 Checks Upgrading Misses

#discuss #python #mcp #security

6 min read

Kiell Tampubolon

Oct 4

MCP Costs 72% of Your Context: The Fix Pi Shipped

#discuss #python #mcp #aiagents

6 min read

Kiell Tampubolon

Oct 3

5 Skills I Still Learn by Hand While Agents Write Code

#discuss #webdev #learning #beginners

6 min read

Kiell Tampubolon

Sep 25

1,5 Juta Token API Bocor di Moltbook. Token Hygiene Bukan Fitur, Itu Standar Minimal

#security #ai #api #infosec

5 min read

Kiell Tampubolon

Sep 25

The fake browser extension playbook is back. This time it ships as agent skills

#security #ai #agents #infosec

5 min read

Kiell Tampubolon

Sep 23

No CVE needed: how a GitHub issue hijacked an AI agent

#security #ai #mcp #github

5 min read

Kiell Tampubolon

Sep 21

The payment webhook failure I had to inject on purpose

#webhooks #fintech #python #sre

4 min read

Kiell Tampubolon

Sep 16

How to Audit an MCP Server Manifest for Prompt Injection in Tool Descriptions

#security #ai #mcp #python

5 min read

Kiell Tampubolon

Sep 15

How to Build an AI SOC With Tools You Already Own (Copilot Studio, Power Automate, Graph API)

#security #soc #ai #automation

5 min read

Kiell Tampubolon

Sep 15

What Is MCP Security? Common Attacks and How to Scan Your MCP Servers

#mcp #aisecurity #cybersecurity #agents

5 min read

Kiell Tampubolon

Sep 14

5 Kesalahan Keamanan MCP yang Jamak Dilakukan Bisnis Kecil (dan Cara Memperbaikinya Hari Ini)

#security #mcp #ai #indonesia

3 min read

Kiell Tampubolon

Sep 14

200,000 exposed MCP servers later, the boring checks still win

#security #aiagents #mcp #devops

2 min read

Kiell Tampubolon

Sep 14

Your error tracker is an input channel now

#security #aiagents #mcp #observability

2 min read

Kiell Tampubolon

Sep 14

The NSA published 17 pages on MCP security. Here it is as a checklist you can run today

#security #aiagents #mcp #devtools

3 min read

Kiell Tampubolon

Sep 13

Bayaran Sudah Masuk tapi Status Masih Belum Dibayar: Kenapa Webhook Pembayaran Gagal Diam-diam

#webhooks #payments #automation #indonesia

4 min read

Kiell Tampubolon

Sep 12

Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives

#security #python #testing #mcp

2 min read

Kiell Tampubolon

Sep 12

Two Agents, One Protocol: My First A2A Test, Including Every Bug on the Way

#showdev #ai #agents #tutorial

3 min read

Highlights the orientation cost of agentic coding

Kiell Tampubolon

Sep 12

Three PRs to Rowboat in 24 Hours, One of Them Taught Me More Than the Others

#opensource #ai #typescript

3 min read

Kiell Tampubolon

Sep 11

What actually changes when an MCP server leaves your laptop

#mcp #ai #node #security

3 min read

Kiell Tampubolon

Sep 11

A valid payment webhook can still be dangerous to process twice

#webhooks #payments #reliability #python

4 min read

Kiell Tampubolon

Sep 7

MCP 2026-07-28 Went Stateless: A Planted Prompt Is a Credential

#discuss #python #mcp #security

8 min read

Kiell Tampubolon

Sep 7

2 CVSS 9.8 Agent Sandbox CVEs Landed the Same Day

#discuss #python #docker #security

6 min read

Kiell Tampubolon

Sep 7

The Cursor Allowlist Bypass That Starts With a File Named curl

#discuss #security #mcp #aiagents

4 min read

Kiell Tampubolon

Sep 5

My MCP Security Scanner Missed 2026's Worst MCP RCE: Here Is the One-Rule Fix

#mcp #security #python #opensource

5 min read

Kiell Tampubolon

Jul 19

Two ways to reuse a privileged CI token (and my rule only caught one)

#security #devops #opensource #python

5 min read

Understanding where free security tools stop

Kiell Tampubolon

Jul 16

We Planted 10 Vulnerabilities to Test Free Semgrep. It Reported 3.

#security #devops #beginners #testing

6 min read

Kiell Tampubolon

Jul 7

Asynchronous Telemetry Blindness in AI Streaming Clients: A PoC Where Text Renders, Billing Stays at Zero

#security #ai #python #llm

7 min read

Kiell Tampubolon

Jul 4

Your AI agent is the most over-privileged account you own

#security #ai #agents #tutorial

4 min read

Kiell Tampubolon

Jul 4

The MCP attack your code review cannot see

#security #mcp #ai #python

4 min read

Kiell Tampubolon

Jul 4

No human reviewed this article before it went live

#showdev #ai #automation #writing

3 min read

Kiell Tampubolon

Jun 29

Di era AI, yang menang bukan yang kerja paling banyak

#career #productivity #ai #mindset

3 min read

Kiell Tampubolon

Jun 23

Connecting Sophos Central to a Copilot Studio Agent with Power Automate

#powerautomate #security #copilotstudio #automation

4 min read

Kiell Tampubolon

Jun 15

I gave Claude a memory of everything I browse — here's the architecture

#mcp #ai #typescript #opensource

3 min read

Kiell Tampubolon

Jun 11

We thought we had location-based MFA. We had something else entirely

#security #azure #microsoft #tutorial

5 min read

June Solstice Game Jam Submission

Kiell Tampubolon

Jun 7

Solstice — A Game About Holding the Light

#devchallenge #gamechallenge #gamedev #javascript

3 min read

Kiell Tampubolon

Jun 7

Finishing a Read-Only MCP Server: From 6 Tools to 9

#devchallenge #githubchallenge #ai #opensource

3 min read

Kiell Tampubolon

Jun 6

Claude Token Monitor 🚀 — Real-Time Claude Usage HUD for Your Windows Desktop

#python #claude #productivity #opensource

3 min read

Kiell Tampubolon

Jun 6

AI Agents: The Future of Autonomous Intelligence

#ai #machinelearning #programming #webdev

3 min read