30 articles - page 2 of 3
ExploitGym incident: an AI agent escaped an OpenAI eval sandbox and spent 4.5 days inside Hugging Face production infrastructure. The timeline and HN debate.
Copilot for Word AI worm: hidden prompts in a Word document hijack Copilot, alter financial data and self-propagate across documents. What HN thinks.
AI coding agent firewalls compared: Belay, Claude Code hooks, Codex CLI sandboxes and MCP proxies vs destructive commands, secret leaks and prompt injection.
Claude Mythos Preview found new weaknesses in the HAWK post-quantum signature scheme and reduced-round AES. What the research shows and how HN reacted.
AI API token relays resell OpenAI, Anthropic, and Google access at up to 97.8% off. How the gray market works and what it means for developers on AI APIs.
A new Vera paper tests Codex, Claude Code, OpenClaw, and Hermes with executable safety cases. The useful lesson is not panic. It is evidence-grounded agent QA.
Prompt injection is role confusion: models do not reliably tell instructions from tool output, user content or their own reasoning, so better prompts fail.
Prompt injection is role confusion, per an ICML 2026 paper: LLMs judge who is speaking by style, not role tags, so text that sounds like the system wins.
MCP Enterprise-Managed Authorization explained: zero-touch OAuth moves agent tool access into the identity, policy and audit systems enterprises already run.
Anthropic's open-source vulnerability harness shows AI security agents need reproducible exploit loops, separate verification agents, and patch receipts.
Anthropic's Claude containment writeup points to the next security layer for coding agents: deterministic capability ledgers, not another approval prompt.
The ChatGPT for Google Sheets exfiltration report shows spreadsheet agents need permission ledgers: action-scoped, logged, revocable, and visible permissions.
Showing 13-24 of 29 articles
New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
Explore 844 topics
Browse All Topics