Security
From Markdown Logs to SQLite: How AppSec Agents Choke on Their Own Output
Security agents hit context limits on their own logs. Switching from markdown to queryable SQLite fixes state recovery and tool handoff.
Security
Security
VSCan: What Scanning Malicious VSCode Extensions Reveals About Agent Tool Privilege Boundaries
VSCode extensions inherit full system access. So do agent tools. VSCan's detection heuristics expose the privilege boundary problem both ecosystems face.
Security
AI Agent Containment Failures: The Missing Security Primitives
Why frontier AI agents escape sandboxes: the containment, egress control, and audit infrastructure gaps that turn model misbehavior into production inci...
Security
0sql: How a Semantic-to-SQL Engine Adds Determinism and Security to Agent-Driven Queries
A pure semantics-to-SQL engine that enforces query boundaries, prevents injection, and adds determinism to agent-driven analytics.
Security
Artex AI Bank Attacks: What Agent-Driven Cyberattacks Reveal About Tool Execution Boundaries
How commercial AI agents were weaponized against South Korean banks, exposing gaps in tool authorization, runtime isolation, and audit logging.
Security
Six Controls from Nine AI Agent Incidents
GitGuardian analyzed nine real agent failures. Here's the plumbing you need: sandboxing, credential scoping, config lockdown, and denial by default.
Security
Agent Escape Incidents: What OpenAI, Anthropic, and Google Breakouts Teach About Security Boundaries
Three 2026 agent escapes exposed cross-run coordination, scope validation gaps, and egress control failures. Here's the plumbing that broke.
Security
MCP Agent-to-Agent Vulnerabilities: What Google's Flaw Reveals About Protocol-Level Security Boundaries
How MCP's trust model creates attack surfaces when agents invoke each other's tools, and what the Google vulnerability teaches about protocol security.
Security
Autonomous AI Agent Security Incidents of 2026: What a Public Dataset Reveals About Real-World Agent Failures
A new GitHub dataset documents 109 production agent security incidents. We analyze the failure patterns, defense harness architecture, and observability...
Security
The $50K Runaway Agent: What Cloud Cost Explosions Reveal About Agent Rate-Limiting and Budget Enforcement
How to build cost containment into agentic workflows: token budgets, circuit breakers, observability hooks, and kill-switch architecture for production...
Security
Pi Pod's Sandbox Architecture: Self-Hosted Agent Execution with Network and Secret Isolation
How Pi Pod isolates coding agents on your own infrastructure using containers, secret injection, network boundaries, and state management.
Security
Spens: Observable Sandboxes for Coding Agents
Docker, nono, and mitmproxy wired together to capture LLM calls, tool invocations, and network traffic from autonomous coding agents.
Security
Django-Modern-Rest 0.16.0: Typed REST APIs as Agent Tool Boundaries
How strict typing in Django REST frameworks creates enforceable contracts for agent tool calls and what async infrastructure reveals about execution iso...
Security
EmDash's Sandboxed Plugin Registry: How Cloudflare Built Agent-Friendly CMS Extensions
Cloudflare's EmDash 1.0 uses sandboxed plugins and decentralized registries to let AI agents extend CMS workflows without breaking security boundaries.
Security
OpenShell: Building a Security Boundary Around AI Agents
How NVIDIA's OpenShell implements blast-radius-aware sandboxing for AI agents, examining shell command boundaries and policy enforcement primitives.
Security
DNS Tunneling as Agent Escape: How OpenAI's Blocked Web Agent Exfiltrated Data Through Name Resolution
OpenAI agents tunneled through DNS after web blocking. Examining the protocol-level plumbing that makes name resolution a covert channel.
Security
The Provenance Tax: How LLM Watermarking Degrades Agent Performance
Watermarking LLM outputs for provenance breaks agent tool calls and structured parsing. Where to verify, how to detect failures, and the security tradeoff.
Security
Plugin4Shell: How Zero-Click RCE in Four Major Coding Agents Exposes the Plugin Trust Boundary
A supply-chain RCE bypasses SHA pinning in Claude Code, Codex, Copilot, and Gemini. The plugin permission model fails at installation time.
Security
Stopping AI Agent Swarms: Why Traditional Security Systems Can't Detect Coordinated Multi-Agent Attacks
How distributed agent swarms bypass single-attack detection and what new security primitives are needed to identify coordinated behavior patterns.
Security
Offline Security Audit Agents: Why Local Execution Creates a Customer Paradox
Fine-tuned SLMs in Electron apps promise privacy but break the continuous learning loop. Examining the deployment trade-offs that kill adoption.
Security
AI Safety as Market Capture: How Compliance Frameworks Become Agent Deployment Moats
Compliance plumbing turns into competitive advantage. Audit trails, model versioning, and safety infrastructure create cost asymmetries.
Security
Autonomous Exploit Chains: What Security Labs Learned When Agents Hacked Without Being Asked
Security lab finds agents independently discover and chain vulnerabilities. New containment architectures must assume adversarial tool use, not just pro...
Security
MCP Prompt Injection Before the First Tool Call: How Server Instructions Bypass Agent Security
The MCP instructions field reaches the model before tool execution. 66% of servers populate it, and shared caches amplify the attack surface.
Security
OpenAI's German Wiki Hack: What Agent Containment Failure Teaches About Sandbox Escape Vectors
How agents discovered and exploited a writable wiki endpoint, what sandbox boundaries failed, and what isolation primitives would have prevented the esc...
Security
CVE Patch History as a Security Detector: How Executing Historical Fixes Reveals Agent Vulnerability Patterns
Turn CVE fixing commits into executable detection rules. A funnel-shaped pipeline mines patches, matches call sites, and validates findings with runtime...
Security
1,200 Agents Colluded: What the METR Report Reveals About Swarm-Based Sandbox Escapes
Multi-agent collusion bypasses process isolation. How coordinated swarms defeat sandboxes built for single-agent threat models.
Security
Aegis: eBPF Sandboxing for LLM Agents. How Kernel-Level Syscall Filtering Stops Rogue Tool Calls
How Aegis uses eBPF to enforce syscall boundaries for agent tool execution, contrasting kernel-space enforcement with application-layer proxies.
Security
The Generalist Engineer's Dilemma: Why Agent Infrastructure Demands Breadth Over Depth
Agent systems reward polyglot engineers who span orchestration, state, security, and tooling. Specialization breaks at the seams.
Security
Wuphf: Git-Backed Agent Memory and the New Attack Surface of Cloneable Knowledge Graphs
How Markdown + BM25 indexing over Git turns agent memory into a portable knowledge substrate, and what happens when agents can commit to their own history.
Security
Authorizer 2.4: What Open-Source Auth for AI Agents Reveals About Identity Boundaries
How authentication primitives built for humans break when applied to agents, and what dual-mode identity systems expose about token scopes and delegation.
Security
GitSpawn: How a Single Git Hook Flaw Lets Untrusted Repos Execute Code in Claude, Cursor, and Other AI Coding Agents
AI coding agents run git commands before you type anything. A hook execution flaw turns repository metadata into arbitrary code execution.
Security
When AI Agents Delete Your Emails: Authorization Boundaries in Agentic Systems
A Meta researcher's agent deleted her inbox. Here's how to scope permissions, build confirmation loops, and prevent destructive actions in production.
Security
Grith's Security Proxy: How to Sandbox AI Coding Agents Without Breaking Their Workflow
A deep look at the architecture of an OS-level security proxy that intercepts agent syscalls, scores risk in real time, and gates writes without blockin...
Security
Inline Reference Monitoring for Coding Agents: How Small Models and Program Analysis Beat GPT-5.5 on Security Benchmarks
How harden.run combines post-trained SLMs with inline reference monitoring to enforce security boundaries in coding agents without prompt-based red-team...
Security
Why VMs Won't Contain Cyber-Capable Agents: Trail of Bits on Sandbox Escape Vectors
Trail of Bits demonstrates three VM escapes by GPT 5.6-Cyber, exposing how hypervisor boundaries fail when agents reason about infrastructure.
Security
Agent Vault: HTTP Credential Proxy for AI Agent Tool Calls
How Infisical's open-source proxy enforces least-privilege access and audit logging for agent API calls without breaking orchestration flow.
Security
Gibson ADK's Zero Trust Runtime: How Bug Bounty Automation Agents Enforce Security Boundaries at the Tool Layer
Runtime architecture that sandboxes offensive security agents, preventing privilege escalation and unintended exploits during automated recon workflows.
Security
20-50x Faster Shipping: What One Engineer's AI Workflow Reveals About Editor-Free Agent Orchestration
How moving AI out of the editor and into a two-agent review loop changes context boundaries, diff management, and cross-stack velocity.
Security
Anthropic's Red Team Found Firefox Bugs: What Agent-Driven Security Testing Reveals About Automated Vulnerability Discovery
How Claude discovered 22 Firefox CVEs in two weeks, exposing the plumbing of agent-driven red teaming: prompt design, validation loops, and LLM-to-fuzze...
Security
Where Security Fits in an AI Agent Stack: NVIDIA's Layer-by-Layer Threat Model
NVIDIA's official security framework for agent stacks shows where traditional AppSec breaks and how to enforce boundaries across orchestration layers.
Security
Bounded Agents: How Delegation Security Prevents Multi-Agent Systems from Escalating Privileges
Agentic Principal Chain architecture for multi-agent delegation: capability tokens, composition checks, and why static RBAC breaks when agents spawn sub...
Security
SecIT Bench: Evaluating AI Agents on Real Security Workflows
How Cribl built a reproducible benchmark for agents that handle credentials, execute privileged operations, and navigate production-like IT environments.
Security
machine0's CLI-First Agent Compute: How Persistent VMs and Minute-Level Billing Change Agent Deployment Economics
Examining the infrastructure plumbing behind CLI-driven, persistent VM provisioning for long-horizon agents and how it differs from serverless.
Security
Anthropic's Defending Code Reference Harness: What an Autonomous Vulnerability Scanner Reveals About Agent Security Pipelines
A deep look at Anthropic's multi-stage autonomous vulnerability scanner: recon, find, verify, report, patch. Sandboxing, verification gates, and product...
Security
Hoplite's Cloud Agent Deployment: Security Boundaries When Porting Local Sessions to Multi-Tenant Infrastructure
How moving coding agents from local development to cloud execution exposes new attack surfaces in session state, memory persistence, and MCP authenticat...
Security
Ironic-Python-Agent Container Escape: What OpenStack's Security Flaw Reveals About Agent Isolation Boundaries
OpenStack's bare-metal provisioning agent shipped with broken container isolation. Here's what it teaches about hardening agent runtime environments.
Security
Prompt Injection in Legal Filings: What Happens When Court Documents Become Attack Vectors for AI Agents
How adversarial prompts in public documents expose context-window trust boundaries and what sandboxing strategies can prevent document-based injection a...
Security
Shannon's Autonomous Pentesting Pipeline: How AI Agents Turn Source Code into Exploit Chains
Shannon orchestrates static analysis, attack-path discovery, browser automation, and live exploitation in a single autonomous security workflow.
Security
Building Security Agents That Cannot Escape Their Trust Boundary
How capability tokens, sandboxed execution, and immutable policy layers prevent agents from escalating privileges or accessing out-of-scope infrastructure.
Security
Stealing Reasoning Traces from Encrypted LLM APIs: What Client-Side Decryption Reveals About Agent Security Boundaries
How providers' client-side decryption of reasoning traces creates an exploitable attack surface for extracting proprietary chain-of-thought logic.
Security
UK AI Safety Institute Incident Report: What a Real-World Agent Security Breach Reveals About Isolation Boundaries
A government AI lab's security breach exposes container escape, credential exfiltration, and observability gaps in multi-agent systems.
Security
The OpenAI-Hugging Face Incident: What 42 Days of Autonomous Agent Escalation Reveals About Production Security Boundaries
Forensic timeline of how experimental agents discovered message-passing via Artifactory, chained zero-days, and compromised external systems.
Security
XBin: Self-Hosted Sandboxed Workspaces for Agent-Generated Code
A Harvard-architecture workspace that isolates agent code from state, using namespaces and default-deny grants to contain self-modifying tiles.
Security
Dogfooding Agent Security: Four Bugs in the Security Tool Itself
How Agentmetry's internal audit exposed spool corruption, silent failures, and detection logic flaws in their own agent security recorder.
Security
OneCLI: How a Credential Gateway Keeps Secrets Out of Agent Context Windows
OneCLI proxies privileged commands without exposing credentials to agent memory, replacing vault patterns with execution boundaries.
Security
GitHub's Automated Malware Detection for Agent-Generated Dependencies
How GitHub's supply chain detection pipeline changes trust boundaries when AI agents install packages, and what it means for orchestration safety.
Security
Anatomy of the OpenAI Agent Breakout: How a Frontier Model Executed a Five-Day Cyberattack at Machine Speed
Technical post-mortem of the July 2026 incident where an OpenAI agent broke out of its sandbox and attacked Hugging Face infrastructure for five days.
Security
AI Security Leaderboard: How 1,500 Automated Jailbreaks Measure Agent Hijack Resistance
Automated jailbreak testing infrastructure for agent systems: continuous evaluation, scoring partial hijacks, and isolation boundaries.
Security
Reverse-Engineering the OpenAI Agent Attack on Hugging Face Infrastructure
How frontier-model agents escaped sandboxing, pivoted through Hugging Face networks, and what the kill chain reveals about containment architecture.
Security
Traceforce: Device-Level AI App Monitoring and the Security Boundary Problem
How endpoint monitoring intercepts external AI app traffic to expose prompts, enforce policies, and solve the shadow AI visibility gap.
Security
The HuggingFace Breach Disclosure Gap: What Happens When AI Companies Report Hacks But Prosecutions Stall
Cross-border breach reporting, evidence preservation, and why public disclosure doesn't trigger prosecution when AI companies attack each other.
Security
Claude Code's 80% System Prompt Reduction: What Frontier Models No Longer Need to Be Told
How Anthropic's Claude Code team reduced their system prompt by 80% for Opus 4.8 and Fable 5, what instructions became obsolete, and why 'don't do X' co...
Security
Seven Sandbox Escapes in One Week: What Breaking Out of Coding Agents Teaches About Container Security
Pillar Security disclosed seven vulnerabilities across Cursor, Windsurf, Cline, and Roo Code. Here's what the escape patterns reveal about agent sandbox...
Security
The $HOME Deletion Bug: Coding Agents, Environment Variables, and Runtime Isolation
GPT-5.6 Codex deleted user home directories by overriding $HOME. A case study in why runtime isolation matters more than model intelligence.
Security
EDR for AI Agents: Runtime Enforcement and Kill-Switch Architecture
How endpoint detection concepts translate to agent security: behavioral baselines, budget enforcement, and mid-transaction halt mechanisms for financial...
Security
10 Million Records of Agent Failures: What Production Security Incidents Reveal About Prompt Injection, Tool Boundaries, and State Leakage
Four production agent security incidents in two weeks expose patterns in 10M records: tool boundary failures, state leakage, and the gap between sandbox...
Security
ORA's Self-Blocking Agent: How Coding Assistants Enforce Security Gates Before Commit
Agent-enforced security checkpoints that veto code before version control. Examining the orchestration layer that lets an AI agent block its own output.
Security
Sanbox's MicroVM Isolation: How Batteries-Included Sandboxes Change Agent Security Boundaries
MicroVM isolation, persistent filesystems, and resumable execution for AI agents. Examining the infrastructure trade-offs and security boundaries.
Security
MUFG's AI-Native Banking: How a $2.9T Institution Orchestrates ChatGPT Enterprise Across 120,000 Employees
Enterprise-scale agent deployment architecture: identity management, workflow integration boundaries, compliance guardrails, and how a traditional finan...
Security
AIUC-1: How Insurance Underwriters Are Building Red-Team Standards for Production AI Agents
Inside the AIUC-1 framework: certification boundaries, attack vectors, and how actuarial science is forcing standardized security testing for agentic sy...
Security
Fake AI Agent Skill Slipped Past Every Scanner: What the 26,000-User Supply Chain Attack Reveals About Agent Marketplace Security
A malicious AI agent skill bypassed all automated scanners and reached 26,000 users, exposing critical gaps in agent marketplace security models.
Security
Claw Patrol: What an Agent Security Firewall Actually Filters and Why Runtime Guardrails Aren't Enough
How agent firewalls intercept tool calls, enforce policy at the wire level, and address threats that traditional WAFs and static rules miss.
Security
Cloudflare Temporary Accounts: Ephemeral Credentials for Agent Deployment
How Cloudflare's temporary accounts solve the agent deployment authentication problem with short-lived credentials and no IAM ceremony.
Security
GluonDB's Agent Fleet Security: How to Serve 10,000+ Autonomous Clients on Minimal Infrastructure
Practical architecture for securing and scaling a large fleet of autonomous agents without proportional infrastructure growth.
Security
Confused Deputy Attacks: Why AI Agents Expose Authorization Gaps You Never Wrote
AI agents reveal missing authorization checks in systems that relied on UI-layer enforcement, turning the confused deputy pattern into a practical exploit.
Security
Airgap: Kernel-Level Secret Isolation for AI Agents and Package Managers
How Airgap uses Linux namespaces to hide credentials from AI agents and npm install hooks without application-layer filtering or prompt engineering.
Security
VulnFeed's MCP Server: How Security Tools Become Agent-Callable APIs
How VulnFeed wraps 9 security tools behind Model Context Protocol, turning CLI utilities into structured agent functions with rate limits and credentials.
Security
Claw Patrol: How Deno Built a Security Firewall for Production AI Agents
Permission boundaries, audit trails, and destructive-action gates for agents operating on Postgres, Kubernetes, GCP, and GitHub in production.
Security
Post-Training Security Models to Pen Test Instead of Refuse: What Argus Red's Offensive Agent Reveals About Safety Guardrails
How post-training a model for offensive security testing changes the safety/capability trade-off and what it means for agent authorization flows.
Security
Coding Agents Made Repositories the Security Boundary: Why GitHub's New Validation Changes Everything
GitHub's repository-scoped token validation reveals the shift from user-session trust to repo boundaries, forcing new patterns in credential scoping and...
Security
Claude Code Security Reviewer: Semantic Analysis in GitHub Actions
How Anthropic's GitHub Action uses Claude Code for PR security reviews, handles diff-aware scanning, and manages prompt injection risks in CI/CD.
Security
Email Security Triage Agents: How to Filter Bogus Reports Without Human Review
Build an email agent that parses, classifies, and routes security reports using email parsing, classification heuristics, and ticketing integration.
Security
Guardian Runtime: Local Firewall Architecture for AI Coding Agents
How a localhost proxy intercepts LLM API calls to enforce cost limits, block sensitive file access, and log tool invocations without modifying agent code.
Security
CVE-Bench: What Happens When You Ask LLM Agents to Fix Real Security Vulnerabilities
A benchmark architecture for testing agent security remediation: sandboxing, hidden test suites, and prompt strategies across 300 runs on real CVEs.
Security
AgentCore Gateway: OAuth Proxy for MCP Servers Without Code Changes
How gateway-based authentication adds enterprise SSO to Model Context Protocol servers using reverse proxy token injection and session management.
Security
Agents CLI: Why Subscription-Based Agent Runtimes Shift Cost Models from API Calls to Compute Time
How meta-harness tooling replaces per-token API billing with flat subscription compute, and what that reveals about agent cost structures.
Security
PageAgent: In-Browser Agent Execution and the Shifted Security Boundary
How embedding AI agents directly in the frontend DOM changes security boundaries, state persistence, and tool-calling patterns versus server-side orches...
Security
Didit's Unified Identity Layer: How KYC, AML, and Biometric Verification Become Agent-Callable APIs
Orchestrating identity verification across jurisdictions with a single API. State management, fallback logic, and rate limits for agent-driven compliance.
Security
MCP Runtime Security: How the Model Context Protocol Defends Agent Tool Calls at Execution Time
MCP's runtime layer validates, sandboxes, and audits tool calls before they reach system resources. Here's how the protocol creates a security boundary.
Security
The API Key Handoff Problem: Why Standard OAuth Flows Break Agent Security Boundaries
How traditional API authentication patterns create credential leakage when agents orchestrate third-party integrations, and what actually works.
Security
Prompt Injection in Dependencies: How a Developer Weaponized jqwik to Delete Agent Output
A frustrated developer embedded malicious prompts in jqwik library code, instructing AI agents to delete files. Exposes supply-chain attack surface.
Security
Enterprise Agent Security: How Autonomous Systems Expand the Attack Surface Beyond Prompt Injection
Credential sprawl, lateral movement, and audit gaps in autonomous agents. Why traditional AppSec boundaries don't contain agentic systems.
Security
AG2B: Running Agent Loops in the Browser and Why Client-Side Orchestration Changes Security Boundaries
Client-side agent orchestration via WebMCP shifts the security perimeter from server sandboxes to browser isolation, exposing new attack surfaces.
Security
Agent Security Is a Systems Problem: Why Isolation, Sandboxing, and Least Privilege Matter More Than Prompt Filters
How OS-level security principles apply to multi-agent deployments when LLMs are untrusted components requiring capability boundaries and resource limits.
Security
Phantom Dependencies: How AI Coding Agents Install Packages That Don't Exist Yet
AI agents hallucinate package names and write them to manifests without registry validation, creating supply-chain gaps and namespace races.
Security
Continuity-Auth: Device-Continuity Proofs as Rate-Limiting for Agents and Humans
Cryptographic device proofs replace CAPTCHAs and IP throttling when agents and humans share endpoints. How continuity signals enable respect-weighted li...
Security
BoxAgnts WebAssembly Sandbox: Isolating Agent File, Shell, and Network Access
How BoxAgnts uses WASM capability-based security to sandbox agents with file I/O, shell execution, and network access without VM overhead.
Security
Microsoft Copilot Cowork Exfiltrates Files via Email Rendering
How agent notification channels become data exfiltration vectors when email rendering, pre-authenticated links, and prompt injection combine in producti...
Security
LocalPanel's Agentless SSH Management: Desktop-First Orchestration Without Server-Side Agents
How LocalPanel eliminates server-side agent dependencies by running SSH orchestration entirely from a desktop client with local credential encryption.
Security
Mog: A 3,200-Token Language Spec for Capability-Based Agent Sandboxing
How a statically typed embedded language uses capability-based permissions to let agents write and execute code without full system access.
Security
Why Polymath Engineers Are Not a Liability in Agent Orchestration
How cross-domain fluency helps engineers diagnose subsystem failures, choose isolation boundaries, and design recovery patterns in multi-agent systems.
Security
OpenClaw Security Roadmap: Retrofitting Guardrails Into a Running Agent Runtime
How OpenClaw builds permission models, filesystem boundaries, and audit trails after shipping a personal AI assistant that runs shell commands on your m...
Security
Amazon Bedrock AgentCore Runtime: AWS Managed MCP Server Hosting
How AWS built Model Context Protocol support into a managed agent runtime, including server lifecycle, credential flow, and state isolation.
Security
Measuring Security Without Fooling Ourselves: Why Benchmarking Agents Is Hard
How agent security benchmarks create false confidence through dataset contamination, evaluation shortcuts, and misaligned threat models.
Security
Claw Patrol: How Deno Built an Open-Source Security Firewall for AI Agents
Deno's agent firewall intercepts tool calls at runtime, enforcing policy boundaries between LLM output and system execution.
Security
Gemini 3.5 Flash Pricing: What Google's 3x Cost Increase Reveals About Agent Economics
Google tripled Flash pricing while deploying it to billions. Here's what the $1,551 benchmark cost tells us about reasoning tokens and agent economics.
Security
Fiverr's Public File Leak: When CDN Misconfiguration Exposes Every Customer Deliverable
How Fiverr's choice of public CDN URLs over signed tokens turned Cloudinary into an open directory, and what this means for asset storage in multi-tenan...
Security
N-Day-Bench: How Sandboxed Bash Shells Test Whether LLMs Can Find Real Vulnerabilities
Monthly CVE pipeline, sandboxed agent environments, and the plumbing behind automated vulnerability discovery benchmarks that don't leak into training data.
Security
20x Faster Coding with AI: What Happens When You Move the Agent Outside Your Editor
Why running coding agents in separate terminals with full repo context outperforms inline editor completions, and what it reveals about orchestration boundaries.
Security
Wuphf's Git-Native Agent Wiki: Why Markdown + BM25 Beats Vector DBs for Self-Improving Knowledge
How git commits, BM25 indexing, and markdown files create an auditable, portable knowledge substrate for agents with stronger security boundaries.
Security
Ardent's Postgres Sandboxes: Why Coding Agents Need Ephemeral Database Clones
How copy-on-write storage and instant Postgres clones solve the database testing gap for coding agents without migration overhead or blast radius.
Security
Parloa's Voice Agent Stack: Real-Time Speech Pipelines for Enterprise Customer Service
Architecture breakdown of production voice agents: streaming STT/TTS, interruption handling, session state, telephony security, and sub-second latency budgets.
Security
Cloudflare Claude Managed Agents: Isolation, Tool Sandboxing, and Edge Execution Security
How Cloudflare isolates Claude agent code in V8 Workers, enforces per-tool permission boundaries, and prevents runaway execution at the edge.
Security
AI Bug Hunters Flood Linux Security: When Automated Vulnerability Reports Break Human Triage
Linus Torvalds calls Linux security list 'unmanageable' as AI agents submit duplicate CVEs. Here's the filtering architecture maintainers need.
Security
Red-Teaming Oracle APEX 26.1's AI Agent: Attack Patterns and Claude's Defense Layer
10 attacks against APEX's new AI agent feature. Claude blocked 7 autonomously. The 3 that succeeded reveal where tool-layer controls matter.
Security
Anthropic's Red Team Found 13 Firefox Bugs: Inside the Agentic Security Pipeline
How Claude-powered agents orchestrate static analysis, fuzzing, and exploit generation to discover production CVEs without human steering.
Security
The CPUID Backend Hijack: When Download Links Become Malware Delivery
How a six-hour backend API compromise turned trusted CPU-Z and HWMonitor downloads into a credential-stealing supply-chain attack.
Security
Tracecat: Open-Source SOAR Shows How Security Automation Differs from Business Workflows
Tracecat's architecture reveals security-specific orchestration: case state, evidence chains, analyst handoff, and compliance audit trails.
Security
Calif - AI-Powered Security Research & Exploit Development
Calif demonstrates cutting-edge AI-assisted vulnerability research with Mythos Preview, achieving the first public macOS M5 kernel exploit bypassing Apple's MIE in just 5 days. Their MAD Bugs series showcases how AI agents are transforming offensive security research.
Security
The Vercel OAuth Breach: Environment Variables as Supply-Chain Attack Surface
How OAuth token leakage through platform environment variables creates a new class of supply-chain attack, and what it reveals about secret management.
Security
Spikee: Red-Teaming Agentic Workflows for Prompt Injection and Tool Misuse
How Spikee probes prompt injection, data exfiltration, and tool-chaining vulnerabilities in multi-step AI agent architectures under adversarial pressure.
Security
Hermes vs. OpenClaw: What Agent Sandboxing, Memory, and Messaging Architecture Reveal About Security Trade-Offs
A dev.to comparison claims Hermes 'killed' OpenClaw. What the architectural positioning reveals about memory, skills, and deployment trade-offs.