Security & Safety
Microsoft MDASH preview ties 100 agents to Defender validation
Microsoft expanded MDASH preview at Build 2026 with 100+ agents, Defender integration, and vulnerability validation claims.
← All categories
Security & Safety
Vulnerabilities, prompt injection, model safeguards, and containment design.
Security & Safety
Claude Code 2.1.161 protects MCP secrets and shell startup files
Claude Code 2.1.161 redacts MCP secrets, while 2.1.160 adds approval prompts before edits to shell, Git, and build-tool configuration.
Security & Safety
In 14 AI coding sessions, zero first prompts asked for security
A SOUPS 2026 paper observed that AI coding assistants push security from upfront requirements into after-the-fact review.
Security & Safety
Anthropic Expands Project Glasswing to 150 Organizations as Mythos Turns Vulnerability Discovery Into a Patch Bottleneck
Anthropic expanded Project Glasswing to about 150 new organizations. The hard part is shifting from Claude Mythos findings to validated disclosures, patches, and deployments.
Security & Safety
The White House AI security order puts frontier models on a 30-day review track
The White House AI security order ties CISA guidance, a Treasury-led vulnerability clearinghouse, classified cyber benchmarks, and pre-release frontier model access into 30-day and 60-day deadlines.
Security & Safety
Adafruit received a Flux.ai demand letter, and AI PCB tools need verifiable provenance
Adafruit published a Flux.ai demand letter dispute. The real builder question is how AI PCB tools prove provenance, data boundaries, and human review.
Security & Safety
ChatGPT Sheets flaw exposed 12 workbooks even with approvals disabled
PromptArmor disclosed an indirect prompt injection chain in ChatGPT for Google Sheets. OpenAI responded by removing Apps Script generation.
Security & Safety
BlueField-4 STX puts agent memory security into silicon
NVIDIA added DOCA Vault, Argus, and Flow security controls to BlueField-4 STX, moving AI agent data policy into storage and DPU paths.
Security & Safety
ChatGPT Sheets security report exposed prompt injection across sidebars
PromptArmor disclosed a ChatGPT for Google Sheets exfiltration path, and OpenAI removed Apps Script code generation.
Security & Safety
Mythos found 10,000 vulnerabilities, now patching is the bottleneck
Anthropic Project Glasswing says Claude Mythos Preview and partners can find vulnerabilities faster than teams can validate, disclose, and patch them.
Security & Safety
Mini Shai-Hulud hit 5,718 commits and AI coding config files
CSA analyzed the Mini Shai-Hulud and Megalodon supply-chain campaigns, showing how npm attacks now reach AI coding settings and CI/CD authority.
Security & Safety
Cursor and Endor Labs Put Security Gates Inside the Coding Agent Loop
Cursor and Endor Labs formalized a hooks-based security partnership for agentic coding, blocking package installs, MCP use, and risky commands inside the IDE loop.