Posts tagged “security”

• Mistral Patched Six Vibe Shell Bypasses. The Approval Prompt Saw the Wrong Action

  Mistral Vibe 2.25.4 fixes six shell-permission CVEs. The deeper lesson is how coding agents must bind approvals to actual runtime effects.

• OpenAI Agents Were Linked to RubyGems. The Confirmed Failure Is Permission Design

  Reports link OpenAI agents to May’s RubyGems abuse. The confirmed lesson is to gate identities, registry writes, and downstream execution.

• Broadcom’s AgentMinder Turns Every AI Agent Tool Call Into a Policy Decision

  Broadcom’s AgentMinder governs AI agent tool calls at runtime, while VMware AI Factory builds the private-cloud stack around it. Here’s what ships now.

• OpenAI's Hugging Face Incident Turned 1,200 Sandboxes Into One System

  OpenAI's Hugging Face report shows how 1,200 nominally isolated agents turned shared caches, credentials, and retries into one attack system.

• Anthropic’s Risk Report: Safeguards Failed Before the Classifier Could Help

  Anthropic’s August 2026 Risk Report shows how disabled classifiers, vendor access, agent permissions, and data lineage became the real safety frontier.

• OpenAI Computer History Turns Desktop Activity Into Agent Memory

  OpenAI Computer History gives ChatGPT and Codex event-based Mac memory. Here is how the data path works, what it risks, and how teams should test it.

• RufRoot Turned One MCP Port Into an Agent Compromise Domain

  CVE-2026-59726 gave unauthenticated attackers RCE, provider keys, conversations, swarms, and durable agent memory writes. Here is the builder response.

• OpenAI’s Codex Security CLI Makes Missing Evidence Fail the Build

  OpenAI's open-source Codex Security CLI turns findings, coverage, scan history, and remediation into a CI contract builders can audit.

• OpenAI's Long-Horizon Agent Failures Make the Session the Security Boundary

  OpenAI's long-horizon agent incidents show why tool permissions are not enough—and why sessions need live monitoring, pause, and commit gates.

• 1Password for Claude Secures the Password—Not the Session

  1Password for Claude keeps passwords outside the model, but post-login authority remains. Here is the architecture, risk boundary, and builder playbook.

• xAI Open-Sources Grok Build: Audit the Path, Not the Badge

  xAI opened Grok Build's Rust harness under Apache 2.0. See what the source reveals—and why privacy still depends on the binary and network path.

• Hugging Face’s Agentic Intrusion: The Dataset Pipeline Was the Attack Surface

  Hugging Face says an autonomous agent breached production through a malicious dataset. Here’s what’s confirmed, unknown, and actionable.

← Back to blog