FinBot CTF Is Live: A Hands-On Companion to the OWASP GenAI Security Project

Summary

FinBot is a hands-on agentic AI capture-the-flag platform from the OWASP GenAI Security Project's Agentic Security Initiative, described as the "Juice Shop for Agentic AI." It simulates a multi-agent vendor management platform with LLM-driven onboarding, fraud detection, invoice processing and communications, and its challenges map to the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, CWE and MITRE ATLAS. The source positions it as a companion to the Agentic Top 10 framework rather than a replacement.

Topics

• AI agents

Related items

• LowHelp defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validationSimilar attack · AWS Security Blog
• MediumTop MCP security resources — November 2026Similar attack · Adversa AI Blog
• LowCVE-2026-123498: Vikunja veans prompt injection through project titles and task contentSimilar attack · NVD/CVE Database
• InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database