» Tag
security
518 postsJailbox: Hardened, Network-Isolated KVM VMs for AI Coding Agents
Jailbox creates hardened, network-isolated KVM VMs to contain AI coding agents and untrusted code, with no route back to your host or LAN.
QuantmLayer Locks Down AI Coding Agents with Kernel-Level Sandboxing
QuantmLayer sandboxes AI coding agents with kernel-level containment (BPF-LSM, seccomp, cgroups), blocking attacks default Docker can't stop.
A Portable Passkey Record Format and Go API Proposal
A proposed portable string format for WebAuthn passkey records, plus a stateless Go API draft, aiming to simplify interoperable credential storage.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comHugging Face Discloses Breach Driven by an Autonomous AI Agent
Hugging Face discloses a breach by an autonomous AI agent, detected via LLM-based analysis after commercial models blocked forensic work.
Bernstein 2.16: The Output-Economy Suite and Safer Agent Summaries
Bernstein 2.16 adds per-role cost attribution, a cost-quality A/B harness, safer proactive context compaction, and schema-enforced completions.
SAML Replay Flaw: Signed Assertion, Unsigned Response Envelope
SAML's InResponseTo field is unsigned and strippable, letting attackers bypass replay protection; the fix is binding checks to the signed assertion ID.
Absence Isn't Safety: Five Fail-Open Bugs in an AI Agent's Guardrails
Five fail-open bugs in an AI agent's policy engine show how missing data was misread as permission—and how each was fixed with default-deny logic.
Microsoft's AI Bug Hunt Tripled CVEs: The Data Behind It
Microsoft's July 2026 patch hit 1150 CVEs, 3x the prior baseline. Public CVRF data reveals how AI-driven bug hunting also reshaped severity.
Droidsaw: A Rust Tool for Byte-Perfect Android DEX/Hermes RE
Droidsaw is a Rust-based Android reverse engineering tool that reconstructs DEX and Hermes files byte-for-byte, with built-in security auditing.
Synapse Lets AI Flag False Positives, Never Delete Findings
Synapse's two-model AI triage flags false positives in security scans without deleting findings, preserving gate reliability and audit trails.