» Tag
security
518 postsReal-World gVisor Lessons from Auditing 8,764 MCP Servers
MarketNow shares practical lessons from running gVisor sandboxing in production, backed by real audit results across 8,764 MCP servers.
Interdict: A Postgres Safety Layer Against Rogue AI Agents
Interdict simulates risky SQL writes from AI agents before execution, measures exact blast radius, makes changes undoable, and blocks unsafe statements without human approval.
APC Framework Closes Authorization Gaps in Multi-Agent LLM Systems
A new authorization framework, APC, tracks delegated authority to block prompt-injection and unsafe action combinations in AI agents.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comGitLost: A Public GitHub Issue Can Leak Private Repos
GitLost shows how a public GitHub issue and a one-word prefix bypass threat detection, leaking private repo contents via Agentic Workflows.
Operation CameraSwarm: 14,000+ Dahua Cameras Compromised
Hunt.io traced Operation CameraSwarm to an exposed dev directory, revealing three exploit paths behind 14,000+ compromised Dahua cameras.
Rsync 3.5.0 Patches 33 Security Flaws in Path and Daemon Handling
Rsync 3.5.0 closes 33 security vulnerabilities, mostly symlink-race path handling bugs in the daemon and client, with CVE IDs and regression tests.
Shai-Hulud npm Worm Infects Over 1,280 Packages
Shai-Hulud npm worm spread credential-stealing malware across over 1,280 packages.
NVIDIA Outlines Four Controls for Securing AI Agents
NVIDIA's AI Red Team details four common failure modes in AI agent deployments and the access, execution, network, and secrets controls that stop them.
Self-Propagating AI Worm Found in Microsoft Copilot for Word
Researcher discloses self-propagating prompt injection worm in Microsoft Copilot for Word, unresolved after 144 days of coordinated disclosure.
Engineering Production Agentic Systems, Part 2: Guardrails
Part 2 of a field manual on production agentic systems: tool surface design, authorization scopes, and audit-trail engineering explained.