Security & Safety
Falco Steps In Before Coding Agents Call Tools
Prempti is a new Falco experiment that evaluates coding-agent tool calls before Claude Code and similar agents execute them.
← All categories
Security & Safety
Vulnerabilities, prompt injection, model safeguards, and containment design.
Security & Safety
RAMPART Turns Prompt Injection Into an Agent Safety Test
Microsoft RAMPART and Clarity Agent move agent safety from late-stage review into CI tests, design records, and pull request evidence.
Security & Safety
Claude agents enter the private network, with execution kept inside
Claude Managed Agents added self-hosted sandboxes and MCP tunnels, redrawing the enterprise boundary between orchestration, execution, and audit.
Security & Safety
Full repo scanning, the SAST gap AWS Security Agent is targeting
AWS Security Agent full repository code review targets trust boundaries and data flows that traditional SAST often misses.
Security & Safety
Composer 2.5 shows Cursor training for reward hacking
Cursor Composer 2.5 shows the coding-agent race shifting from benchmark scores toward long-task failure points, targeted feedback, and reward-hacking detection.
Security & Safety
Why OpenAI replaced certificates after signed malicious packages
The TanStack npm incident reached OpenAI Codex and ChatGPT Desktop certificate rotation, showing how AI development tools now inherit supply-chain trust risk.
Security & Safety
The My Lord recruiting bot exposed the real AI hiring risk
A LinkedIn profile prompt injection changed automated recruiting messages. The deeper issue is what happens when resumes and profiles become agent input.
Security & Safety
Meta AI incognito mode turns privacy into infrastructure
Meta Incognito Chat runs AI conversations through WhatsApp Private Processing. The key shift is not deleted history, but verifiable private inference.
Security & Safety
ChatGPT can read bank data, and finance AI starts with read-only trust
OpenAI brought personal finance into ChatGPT. The real story is not budgeting, but how AI products handle permission boundaries around sensitive money data.
Security & Safety
Google Saw the First AI Zero-Day, and Security Timelines Are Changing
Google GTIG disclosed the first zero-day exploit attempt it assesses was developed with AI, shifting how defenders should think about discovery and weaponization speed.
Security & Safety
The New AI App Vulnerability Is Configuration
Microsoft found exposed AI apps, 15% unauthenticated MCP servers, and Mage AI and kagent cases where defaults became real attack paths.
Security & Safety
The new bottleneck in AI document extraction
Airia Form Review Step adds human review and audit trails before AI-extracted document data becomes a system-of-record entry.