SECURITY

OpenAI released the Codex Security CLI and TypeScript SDK as open source on GitHub. The Promptfoo team behind it, the 2.1k-star reception, and what the HN community says about cost, guardrails, and local model support.

How Claude Code, Cursor, Codex, GitHub Copilot, Aider, and Windsurf handle permissions, sandboxing, credential protection, and prompt injection. A structured comparison for engineering teams evaluating agent security.

A federal case in Atlanta is testing whether using a privacy-focused mobile OS can be treated as destruction of evidence. The GrapheneOS duress PIN feature erased a traveler's phone during a CBP interrogation - and prosecutors are charging him for it.

A Google ADB maintainer proposed restricting on-device ADB connections to loopback, which would break Shizuku, libadb-android, Termux workflows, and an entire ecosystem of open-source power-user apps.

A security researcher found a GitHub personal access token with admin privileges to hundreds of repos baked into Hanwha Vision camera firmware. The cause: a Vite build leaking process.env into production.

A July 2026 paper shows how hallucinated repository and skill names can become promptware delivery paths. The practical fix is boring: search before fetch, verify names, and sandbox every install.

Prompt injection, sandbox escapes, and hallucinated dependencies are now documented, patched, CVE-numbered realities. Here is the threat model for agent-written code and the defenses worth adopting this week, ranked by effort.

Security researcher discovers TP-Link Kasa cameras exposed precise home coordinates via unauthenticated UDP - a vulnerability publicly documented since 2020 but only patched in 2026.

CISA added the first AI agent building platform to its Known Exploited Vulnerabilities catalog. What the Langflow IDOR vulnerability means for agent security and how to check if you're exposed.

Voice cloning now requires just 3 seconds of audio to impersonate someone. With $893M in reported losses, detection has failed - here's what might actually work.

Days after getting caught uploading entire codebases to xAI servers, Grok Build is now open source on GitHub. The HN community isn't convinced it's enough.

Security researchers disclosed a Cursor vulnerability that auto-executes malicious git.exe files from repos - after waiting 7 months with no fix. Here's what developers need to know.

Open-source tool gives Claude Code, Codex, and other agents their own isolated Linux VM on your machine - network firewall included, no cloud account required.

A use-after-free bug in the Linux kernel's real-time mutex implementation has existed since 2011. Researchers earned $92,337 from Google's kernelCTF for discovering and exploiting it.

A security researcher intercepted Grok Build's network traffic and found it uploads entire repositories - including .env files with secrets - to xAI servers. Here's what the data shows.

A new experimental technology encodes messages in video using motion-based steganography, exploiting how AI models process video as individual frames rather than continuous motion.

Security researchers discovered a prompt injection vulnerability in GitHub's Agentic Workflows that allows attackers to extract private repository contents through public issues.

Someone found an obfuscated bash script on a Uniqlo x Akamai t-shirt and decoded it. Here's what they found - and what HN thinks about whether it was AI-generated.

Flipper Devices announces their firmware hit 1.0 stability and outlines a new community contribution model - while HN debates whether 'done' software is actually a good thing.

A developer reverse-engineered Claude Code and found hidden markers that classify users by timezone, domain, and API keywords - using unicode apostrophe swaps and date format changes.