Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityLernen Sie Linux-Befehle mit Webminal direkt im Browser(24.09.2026 um 08:00 Uhr)
•
Sicherheitslücken (CVE)USN-8811-1: urllib3 vulnerability(24.09.2026 um 03:39 Uhr)
•••
Sichere ProgrammierungYour Agent Has Observability. It Doesn't Have Evals.(24.09.2026 um 07:43 Uhr)
••
Sichere ProgrammierungProtocol Upgrade Compatibility Review: Robinhood(24.09.2026 um 07:45 Uhr)
•
Sichere ProgrammierungYour tests share your blind spots. Readers don't.(24.09.2026 um 07:52 Uhr)
•
Sichere ProgrammierungYour AI agent has more permissions than your users(24.09.2026 um 07:54 Uhr)
••
Windows Tipps & SecurityLernen Sie Linux-Befehle mit Webminal direkt im Browser(24.09.2026 um 08:00 Uhr)
•
Sicherheitslücken (CVE)USN-8811-1: urllib3 vulnerability(24.09.2026 um 03:39 Uhr)
•••
Sichere ProgrammierungYour Agent Has Observability. It Doesn't Have Evals.(24.09.2026 um 07:43 Uhr)
••
Sichere ProgrammierungProtocol Upgrade Compatibility Review: Robinhood(24.09.2026 um 07:45 Uhr)
•
Sichere ProgrammierungYour tests share your blind spots. Readers don't.(24.09.2026 um 07:52 Uhr)
•
Sichere ProgrammierungYour AI agent has more permissions than your users(24.09.2026 um 07:54 Uhr)
••
Intelligence View
⚡ tsecurity.de Intelligence

Your AI's output is only as good as its briefing — so we wrote it a 1,900-line cookbook

AI isn't code Ask a function the same question twice, you get the same answer. That's the contract. Ask an LLM the same question twice, you might get two different answers — both correct, phrased differently. Most frustration with A…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




AI isn't code



Ask a function the same question twice, you get the same answer. That's the contract. Ask an LLM the same question twice, you might get two different answers — both correct, phrased differently.



Most frustration with AI-assisted building comes from expecting the first contract while working with the second. The fix isn't prompting harder. It's briefing better: AI = context.






The problem, concretely



WebsitePublisher.ai is a platform where AI assistants build complete websites via MCP tools (59 of them) and REST APIs. Building a webshop touches 14 integrations: product catalog, cart, checkout orchestration, payments (Mollie/Stripe), inventory, invoicing, email, search, discounts, reviews, wishlist, abandoned-cart recovery, analytics, and shipping.



An AI improvising across 14 integrations makes predictable mistakes: computing order totals client-side, guessing endpoint names, mixing up two separate auth systems (visitor sessions vs admin tokens), writing directly to the data API from the browser.



We know, because we made every one of those mistakes ourselves first.






The fix: a cookbook as context



So we wrote them down. Once. The E-commerce Cookbook is ~1,900 lines of markdown, served from a CDN, structured as 12 steps from empty project to working shop. It encodes:





  • Two golden rules. Browser JS never writes directly to the data API, and money/stock/points logic is always server-side. Each with a ❌/✅ table of real exploits we caught pre-go-live.


  • Two auth systems, kept apart. Visitor sessions (magic link) for the storefront; separate password-based admin tokens for the shop owner. The cookbook spells out which endpoint belongs to which — because "any customer can delete products" is one confused auth model away.


  • Every pitfall, documented. Server-side rendering helpers that don't run inside script tags. Cart responses that return empty option arrays. Field names that differ between cart and catalog. Each one cost us a debugging session once — and never again.






The delivery mechanism



A dashboard tile → one prompt with the user's project ID pre-filled → paste into Claude, ChatGPT or Cursor:




Read the cookbook at https://cdn.websitepublisher.ai/cookbooks/ecommerce.md
and use it to build a complete webshop on my WebsitePublisher project 12345.
Start at Step 0 and follow the steps in order.






The AI fetches the recipe and builds, step by step. Same input document, consistent output shape — the consistency lives in the context, not the model.






Takeaway



If your users work through AI agents, your documentation is your product surface. A markdown file your users' AI can read might be the highest-leverage feature you ship this quarter. It was for us.



Part 1 of a short series on how AI actually behaves when building software. Next up: context strategies, and where AI genuinely struggles (images, big files).

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - Your AI's output is only as good as its briefing — so we wrote it a 1,900-line cookbook
id: 19f043cb-a004-40e7-b208-bd485f9cd1f3
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Your AI\'s output is only as go" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Your AI's output is only as good as its .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Your AI's output is only as good as its briefing — so we wrote it a 1,900-line cookbook

Thematisch verwandte Begriffe: Your, output, only, good · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96676 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impa…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger • Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick