Topic
SECURITY
All blog posts, tools, and guides about Security from Developers Digest.
71 resources - 66 posts, 3 tools, 2 guides
Blog Posts
View in blog →
Cloudflare Adaptive Intelligence: Bot Scores That Retrain Weekly Instead of Quarterly
Cloudflare's new bot detection engine drops the keep-everyone-out wall for a continuously retraining model, disposable rules, and a memory of past attacks. The first component ships today as a toggle in Bot Management, and the design is an inversion of how every bot product has worked until now.
7 min read
Ray CVE-2025-62593: Botnet Beat the Patch, CISA Gives Feds 3 Days
The RondoDox botnet started exploiting Ray CVE-2025-62593 two days before the CVE was public, and CISA gave federal agencies just three days to remediate. Here is how to check whether your Ray cluster or dev machine is exposed and what to harden first.
7 min read
arrayref 0.3.10 Ran a Remote Payload at Build Time
On August 20, 2026, compromised arrayref 0.3.10 pulled in a proc-macro1 typosquat whose build script fetched a remote binary. Coding agents that cargo update on yank warnings walk into this.
8 min read
Cloudflare Gateway Can Now Detect MCP Traffic on the Wire: Shadow MCP Gets a Network Boundary
Cloudflare Gateway now classifies MCP traffic by protocol headers instead of hostname heuristics, ships a shadow-MCP dashboard, and lets admins block any MCP connection that does not arrive through an approved portal. The 2026-07-28 stateless spec is what made it possible.
7 min read
Skill Files Are the New Supply Chain Attack Surface
Adversarial skill files - folders of instructions agents load dynamically - exploit a mainstream enterprise coding agent in 95.5 to 96.1 percent of runs, while the agent recognizes danger 1.99 percent of the time. The skill folder is now a measured attack surface, and the defense is admission engineering, not better prompts.
11 min read
Anthropic Now Watermarks All Claude Output: Text Watermarks and C2PA for Files
Anthropic confirms that every Claude model released after August 2, 2026 embeds a machine-readable watermark in generated text and attaches C2PA provenance metadata to generated files, across the API, Claude Code, Cowork, and Tag. Detection tooling for third parties is coming, but details are not published yet.
6 min read
Cloudflare DDoS Report H1 2026: 1 Tbps Attacks Soared as DNS Floods Became the Leading Vector
Cloudflare mitigated 935 network-layer attacks above 1 Tbps in H1 2026, a +519% quarter-over-quarter jump, while DNS floods grew from 25.7% to 40.0% of network-layer attacks. Here is what the numbers say about how attacks are changing and what it means for anyone running public infrastructure.
7 min read
Encrypted Chain-of-Thought Is Not Private: New Paper Decodes Reasoning Traces From Anthropic, OpenAI, and Google APIs
A new arXiv paper shows the encrypted reasoning blocks that Anthropic, OpenAI, and Google return to API clients can be replayed into weaker models from the same provider and transcribed verbatim. The authors decoded 315,320 blocks from public repositories and recovered 367 PII artifacts and 182 credentials.
7 min read
Stop Means Stop: New Paper Finds Agent Approval Gates and Cancellation Leak in Six Frameworks
A new arXiv paper probes six widely used open-source agent frameworks and finds the barrier semantics of approval gates, cancellation, and timeouts hold on none of them. A sibling branch can execute while the user is rejecting another one, and replay can double-execute. The fix is a verified external gate called SoundGate.
6 min read
Vercel Sandbox Gets a Real Network Boundary: Why Egress Control Is the Missing Half of Agent Security
Vercel Sandbox now polices all outbound traffic on the host, outside the microVM, with SNI-based domain policies, CIDR rules, host-level credential injection, and a deny-all default. Here is why a network boundary is the half of agent isolation that VM escapes missed.
6 min read
Cloudflare Ships Behavioral Trust for the Agentic Internet: 206M Events, 73K Zones
Cloudflare's Web Integrity team published the framework behind its agent traffic posture: continuous behavioral trust instead of point-in-time bot scoring, Precursor telemetry from 206 million evaluation events a day across 73,438 zones, and a verified-bot taxonomy where agents earn access by declaring themselves honestly.
7 min read
GitHub Malware Advisories Now Cover Eight Package Ecosystems
Dependabot's malware detection expands from npm to PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer by ingesting OpenSSF's malicious-packages data into the GitHub Advisory Database.
6 min read
Cloudflare's Agent Access Model: Zero Trust for Task-Scoped Agent Runs
On August 5 Cloudflare published the Agent Access Model: a reference architecture where credentials are short-lived and task-scoped, enforcement lives in the harness and network instead of the prompt, and a Trust Ratchet only narrows an agent's capabilities. The cleanest spec yet for least privilege at agent speed.
7 min read
Cloudflare OS: The Open Source Agent Workspace That Treats Apps Like Files
On August 5 Cloudflare open sourced Cloudflare OS, the agent workspace it has run internally since May: capability-based Gatekeepers instead of ambient MCP access, apps as private per-user instances, and approvals that simulate outcomes so agents never stall. A concrete blueprint for the company-wide agent platform.
8 min read
The RipGrep Musl Segfault That Led to a One-Line Linux Kernel Patch
A ripgrep musl binary crashing during very-large searches turned out to be a suspected Linux 7.0 kernel race - a thread's own store vanishing mid-function. The reporter's instrumentation pinned it, and a kernel-hardening maintainer posted a one-line fix candidate for testing.
7 min read
AgentS4D: 66% of All Coding Agent Runs Were Unsafe Yet Still Completed
A new arXiv benchmark ran 6,560 sandboxed runs across Claude Code, Codex, OpenClaw, and Hermes with five LLMs. 68% of runs triggered unsafe signals, and 66% of all runs were unsafe yet still passed completion checks. Task completion does not prove an agent ran safely.
7 min read
GitHub Actions Self-Repository Syntax: Reference Your Own Actions at the Running Commit
GitHub Actions added a $/ prefix that resolves a same-repository action or reusable workflow at the exact commit being run, with no checkout. It fixes the pinning trap that made enterprise SHA-pinning policies hard to satisfy for a repo's own actions.
6 min read
OpenAI Disrupts a Cambodia Scam Network That Ran on ChatGPT
OpenAI took down a Cambodia-based operation that used ChatGPT for personas, translations, forged documents, and admin work. It is the clearest picture yet of how LLMs slot into organized fraud.
7 min read
OpenAI Open-Sourced Codex Security: What HN Thinks
OpenAI released the Codex Security CLI and TypeScript SDK as open source on GitHub. The Promptfoo team behind it, the 2.1k-star reception, and what the HN community says about cost, guardrails, and local model support.
7 min read
AI Coding Agent Security Models Compared 2026: Permissions, Sandboxing, and Threat Models for Every Major Tool
How Claude Code, Cursor, Codex, GitHub Copilot, Aider, and Windsurf handle permissions, sandboxing, credential protection, and prompt injection. A structured comparison for engineering teams evaluating agent security.
10 min read
US Prosecutors Charge Traveler Over GrapheneOS Phone Wipe During Airport Search
A federal case in Atlanta is testing whether using a privacy-focused mobile OS can be treated as destruction of evidence. The GrapheneOS duress PIN feature erased a traveler's phone during a CBP interrogation - and prosecutors are charging him for it.
8 min read
Android May Soon Restrict On-Device ADB - What Developers Need to Know
A Google ADB maintainer proposed restricting on-device ADB connections to loopback, which would break Shizuku, libadb-android, Termux workflows, and an entire ecosystem of open-source power-user apps.
7 min read
A Security Camera Shipped a GitHub Admin Token in Its Login Page
A security researcher found a GitHub personal access token with admin privileges to hundreds of repos baked into Hanwha Vision camera firmware. The cause: a Vite build leaking process.env into production.
6 min read
HalluSquatting Makes AI Coding Agents a Supply-Chain Problem
A July 2026 paper shows how hallucinated repository and skill names can become promptware delivery paths. The practical fix is boring: search before fetch, verify names, and sandbox every install.
9 min read
Securing AI Coding Agents: A Practical Threat Model for 2026
Prompt injection, sandbox escapes, and hallucinated dependencies are now documented, patched, CVE-numbered realities. Here is the threat model for agent-written code and the defenses worth adopting this week, ranked by effort.
13 min read
TP-Link Kasa Cameras Leaked Home GPS Coordinates for Six Years
Security researcher discovers TP-Link Kasa cameras exposed precise home coordinates via unauthenticated UDP - a vulnerability publicly documented since 2020 but only patched in 2026.
7 min read
Langflow CVE-2026-55255: The First AI Agent Framework on CISA's Must-Patch List
CISA added the first AI agent building platform to its Known Exploited Vulnerabilities catalog. What the Langflow IDOR vulnerability means for agent security and how to check if you're exposed.
7 min read
AI Voice Fraud Needs Three Seconds of Your Voice
Voice cloning now requires just 3 seconds of audio to impersonate someone. With $893M in reported losses, detection has failed - here's what might actually work.
7 min read
xAI Open-Sources Grok Build After Data Exfiltration Scandal
Days after getting caught uploading entire codebases to xAI servers, Grok Build is now open source on GitHub. The HN community isn't convinced it's enough.
6 min read
Cursor 0day: Why a 7-Month-Old Vulnerability Is Still Unpatched
Security researchers disclosed a Cursor vulnerability that auto-executes malicious git.exe files from repos - after waiting 7 months with no fix. Here's what developers need to know.
7 min read
Clawk: Disposable Linux VMs for Coding Agents Without Cloud Bills
Open-source tool gives Claude Code, Codex, and other agents their own isolated Linux VM on your machine - network firewall included, no cloud account required.
6 min read
GhostLock: A 15-Year Linux Kernel Vulnerability That Affects Every Distribution
A use-after-free bug in the Linux kernel's real-time mutex implementation has existed since 2011. Researchers earned $92,337 from Google's kernelCTF for discovering and exploiting it.
7 min read
What xAI's Grok Build CLI Actually Sends Home: A Wire-Level Analysis
A security researcher intercepted Grok Build's network traffic and found it uploads entire repositories - including .env files with secrets - to xAI servers. Here's what the data shows.
6 min read
Ghost Font: Text That Humans Can Read But AI Cannot
A new experimental technology encodes messages in video using motion-based steganography, exploiting how AI models process video as individual frames rather than continuous motion.
6 min read
GitLost: How Researchers Tricked GitHub's AI Agent Into Leaking Private Repos
Security researchers discovered a prompt injection vulnerability in GitHub's Agentic Workflows that allows attackers to extract private repository contents through public issues.
7 min read
Decoding the Hidden Bash Script on a Uniqlo T-Shirt
Someone found an obfuscated bash script on a Uniqlo x Akamai t-shirt and decoded it. Here's what they found - and what HN thinks about whether it was AI-generated.
5 min read
Flipper Zero Shifts to Community-Driven Development
Flipper Devices announces their firmware hit 1.0 stability and outlines a new community contribution model - while HN debates whether 'done' software is actually a good thing.
5 min read
Claude Code Is Steganographically Marking Requests
A developer reverse-engineered Claude Code and found hidden markers that classify users by timezone, domain, and API keywords - using unicode apostrophe swaps and date format changes.
7 min read
GLM 5.2 Outperforms Claude Code on Semgrep's IDOR Vulnerability Benchmarks
Semgrep's security research team benchmarked LLMs on IDOR vulnerability detection. The open-weight GLM 5.2 beat Claude Code by 7 points at roughly one-sixth the cost.
6 min read
OpenAI's June API Updates Are Really a Control-Plane Upgrade
OpenAI's June 2026 API changelog looks like scattered platform plumbing. Read together, moderation scores, workload identity, Admin APIs, prompt-cache retention, container billing, and Secure MCP Tunnel are the pieces teams need to run agents with real controls.
8 min read
Perplexity Bumblebee: Developer Guide to the Open Source Supply Chain Scanner
Bumblebee is Perplexity's open source scanner for detecting compromised packages, extensions, and MCP configs on developer machines. A read-only Go binary that checks npm, PyPI, Go modules, and 10+ ecosystems against exposure catalogs - without running any install scripts. Here is how to set it up and use it.
7 min read
Arcade AI Agent Authorization: A Developer Guide
Arcade just raised $60M to become the secure action layer for production AI agents. Here is what their MCP runtime actually does, how it differs from rolling your own OAuth, and when to use it.
7 min read
Vulnerability Reports Are Not Special Anymore
Filippo Valsorda argues that LLMs have ended the era of treating security researchers with kid gloves. When anyone can discover vulnerabilities with an AI, the old coordinated disclosure model breaks down.
7 min read
Agent Identity Is the Missing Security Layer for AI Workflows
The Linux Foundation's Agent Name Service proposal points at a real gap in AI agent infrastructure: agents need verifiable identity, scoped capabilities, revocation, and audit trails before they can safely act across tools.
7 min read
Agent Sandbox Architecture: How to Choose the Right Runtime Boundary
AI agents are getting their own computers. Here is how to choose a sandbox architecture: filesystem isolation, network policy, secrets boundaries, snapshots, and when shell access is overkill.
8 min read
Cybersecurity Skills for AI Agents Are Becoming Runtime Infrastructure
A GitHub-trending library of Anthropic cybersecurity skills points at the next agent security layer: framework-mapped playbooks that need provenance, tests, and abuse boundaries before they become trusted runtime tools.
8 min read
OpenAI Daybreak Shows the AppSec Bottleneck Is Patching, Not Finding
OpenAI's Daybreak and Patch the Planet point at the real agentic AppSec shift: security agents only matter when they produce validated, reviewable patches maintainers can actually merge.
8 min read
Claude Code Permissions: A Practical settings.json Guide for Allow, Deny, and Ask Rules
Stop the approval-fatigue prompts without going full YOLO mode. A hands-on guide to Claude Code's permission system - settings.json scopes, allow/deny/ask rules, tool specifiers, and the headless flags that actually matter.
11 min read
Mastra npm Supply Chain Attack: 140+ AI Framework Packages Backdoored
On June 17, 2026, attackers hijacked a dormant Mastra contributor account and pushed malicious versions of 140+ packages. The payload steals crypto wallets, browser data, and cloud credentials. Here is what happened, how to check your lockfile, and what to do if you installed an affected version.
7 min read
AI Infrastructure Agents Need Spend Guardrails
The viral DN42 AWS bill story is funny until you realize the missing primitive: infrastructure agents need hard cloud-spend guardrails before they touch real accounts.
8 min read
The One-Cent Attack: Prompt Injection Through Bank Transfer Memos
Security researchers showed a €0.02 bank transfer could compromise a banking AI assistant. Here is the exact attack chain - and what every developer building agents needs to do differently.
8 min read
Fable 5 Broke Enterprise ZDR Agreements: What Dev Teams Must Do Now
Anthropic's Claude Fable 5 mandates 30-day data retention on every platform, overriding existing Zero Data Retention contracts for enterprise API customers. Here is what compliance teams and developers need to audit before their next deployment.
8 min read
June 10, 2026: The Day the AI Dev Tool Market Showed Its Whole Hand
Pricing deadlines, infrastructure funding, a banking prompt injection case, and a 4x speed breakthrough - June 10 was one of the densest single days the AI dev tool market has ever produced.
7 min read
Agent Config Files Are Executable Supply Chain
A Hacker News thread on config files that run code points at the next AI coding risk: agent hooks, skills, and editor rules need review like executable dependencies.
8 min read
Security Agents Need Repro Harnesses, Not More Scan Prompts
Anthropic's open-source vulnerability harness shows where AI security work is going: reproducible exploit loops, separate verification agents, and patch receipts.
9 min read
The Agent Security Checklist I Use Before Connecting Tools
Before an AI agent gets tools, files, APIs, MCP servers, or deployment access, decide what it can read, write, call, log, and roll back.
8 min read
AI Security Scanners Move the Bottleneck to Triage
Anthropic's Project Glasswing update is a useful signal for developer teams: AI can find vulnerability candidates faster than humans can verify, disclose, patch, and ship them.
8 min read
Sandboxed Agents Are Becoming the Team Control Plane
Runtime's Launch HN thread is a useful signal: teams do not just want isolated coding agents. They want a control plane for approvals, secrets, telemetry, review, and merge policy.
8 min read
Agent Skills Are Becoming Package Managers
GitHub trending is full of agent skill registries. The winning pattern is not more prompts. It is dependency governance for the instructions your coding agents inherit.
8 min read
Claude Code Plugin URLs Turn Skills Into a Supply Chain
Claude Code's newer plugin URL and hard-deny controls are small release-note items with a big implication: agent extensions now need supply-chain discipline.
6 min read
TanStack's npm Compromise Is the CI Lesson Agent Teams Needed
The TanStack npm incident was not just a package-security story. It was a reminder that AI agent workflows inherit every weak trust boundary in CI.
9 min read
OpenAI's Codex Mac Certificate Deadline Is a Runbook Test
OpenAI's May 8 macOS certificate rotation for ChatGPT, Codex, Codex CLI, and Atlas is not just a one-off update. It is a useful test of how your team governs AI developer tools.
7 min read
Approval Fatigue Is an Agent Security Bug
Manual approval prompts stop protecting users when coding agents ask too often. The better pattern is risk-aware autonomy: safe defaults, narrow deny rules, and approvals only for meaningful changes.
7 min read
lib0xc Is the Opposite of Rewrite Culture
Microsoft's lib0xc landed on Hacker News with a practical message: safer systems code often means better C APIs, warnings, bounds checks, and incremental adoption, not a heroic rewrite.
8 min read
Codex Security Preview: AppSec Agent for Real Repos
OpenAI's Codex Security agent reviews app code for vulns. Here is what it caught and missed on three real production repos.
10 min read
OpenAI Codex Cloud Security Playbook 2026: Internet Access, Prompt Injection, and Safe Defaults
A practical security playbook for running Codex cloud tasks safely in 2026 using OpenAI docs: internet access controls, domain allowlists, HTTP method limits, and review workflows.
10 min read
Related Tools
All tools →Cloudflare
This SiteCDN, DNS, DDoS protection, and edge computing. Free tier handles most needs. This site uses Cloudflare for DNS and analytics. Workers for edge compute.
InfrastructureGlama
Largest MCP server directory with 17,000+ servers. Security grading (A/B/C/F), compatibility scoring, and install configs. ChatGPT-like UI for browsing and testing.
MCP ToolsE2B
Open sourceOpen-source cloud sandboxes for AI agents. Isolated environments that start in under 200ms, run code in Python, JavaScript, and more, and persist sessions up to 24 hours.
InfrastructureGuides
All guides →Claude Code Complete Course
A complete, citation-backed Claude Code course with setup, prompting systems, MCP, CI, security, cost controls, and capstone workflows.
GuideChronicle Research Preview Setup Guide
Set up Codex Chronicle on macOS, manage permissions, and understand privacy, security, and troubleshooting.
GuideKeep exploring
More on Security
- - Cloudflare - recommended Security tool from the Developers Digest directory
- - Tools Directory - dive deeper across the Developers Digest knowledge base
- - All Security articles in the blog archive
- - Developers Digest on YouTube - video tutorials covering Security and more
Get Smarter About AI Dev
New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
One email per weekReal code, not theoryFree forever
Explore 921 topics
Browse All Topics