» Tag
security
92 postsAI Struggles to Fix Vulnerabilities Without Human Oversight
AI models struggle with security flaw remediation, achieving only a 26% success rate. Human oversight remains crucial for effective patching.
Prompt Injection: Threats and Solutions in Engineering
Prompt injection is a structural flaw threatening the security of language models. Solutions for developers are discussed.
The Credential Problem Behind Agentic AI
Hugging Face's breach by an autonomous AI agent underscores the importance of credential management for engineers.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comResearcher Tricks Apple’s Find My into Sharing Location Data with Linux
A researcher enrolled a Linux device into Apple’s Find My network, accessing location data.
Researchers Revive Expired Credit Cards for Unauthorized Payments
Researchers reveal that expired contactless credit cards can be exploited for unauthorized payments. EMV protocol vulnerabilities are highlighted.
AI Orchestration Platforms and Their Security Vulnerabilities
Learn about security vulnerabilities in AI orchestration platforms and the risks of RCE.
Magic Grants Monero FCMP++ Crypto Security Assessment
Magic Grants performed a security assessment for Monero's FCMP++ protocol.
Max Corbridge Discusses Securing AI Agents on SE Radio
Max Corbridge discusses the security of AI agents, highlighting vulnerabilities and defense strategies crucial for engineers.
Chinese Loongson Processors Exhibit Cache Leaks, Researchers Warn
Loongson processors have been found to have leaky caches, allowing attackers to access sensitive data. Researchers from Germany's Helmholtz Center report the vulnerability.
Microsoft's August Patch: 421 Bugs and North Korean Attack
Microsoft patched 421 security vulnerabilities in August. North Korea's Lazarus Group targeted these vulnerabilities in a series of cyber attacks.