Tag
13 articles tagged Engineering.
AI Security
For about eleven hours on October 29, 2026, Cursor's extension marketplace served a modified Claude Code extension that added an attacker SSH key and tried to open a reverse tunnel. Here is how to check a machine, remove the persistence, and set install controls that would blunt the next one.
AI Security
A critical out-of-bounds write in the Brotli decoder can be triggered by any compressed response your code decodes. AI agents that browse, crawl, or fetch URLs on request are a direct path to it. Here is what to patch and where the copies hide.
AI Security
Coding agents obey instruction files in the folder you start them in. Start one in ~/Downloads and any web page that can save a file there can give it orders.
AI Governance
An AI-BOM lists the models, datasets, and software inside an AI system in a machine-readable form. Here is what to put in one, which standard fields to use, and how to make it enforceable.
AI Security
An agent that remembers can be taught to remember the wrong things. Treat every memory write as a privileged action with provenance, review, and an expiry date.
AI Security
The LiteLLM 1.107.0 release on PyPI and its Docker images carried a credential stealer that runs on every Python start. Here is what it did, how to tell if you were hit, and what to rotate.
AI Security
Anything a prompt can influence, an attacker can influence. Here is how to handle model output safely at each place it lands: the browser, the database, the shell, and the interpreter.
Security Operations
Two critical PHP engine flaws allow unauthenticated remote code execution on ordinary PHP sites, regardless of application code. Here is what to patch, what to do if you cannot, and what to watch for.
AI Security
An LLM endpoint turns every request into a bill. Here is how to cap what a single user, an agent loop, or a stolen API key can spend before it becomes an incident.
AI Security
A RAG system that searches one shared index for every user will eventually hand someone a document they were never allowed to read. Here is how to enforce access control at retrieval time.
AI Security
AI coding assistants regularly suggest packages that do not exist, and the same fake names come back again and again. Here is how slopsquatting works and the controls that stop it at review, install, and CI time.
AI Security
A downloaded model checkpoint is not just data. If it is a pickle, loading it can execute code. Here is how to load third-party weights without handing that file a shell.
Privacy
LLM applications need detailed logs to debug and investigate incidents, but prompts are full of personal data. Splitting logs by purpose and redacting at the edge resolves most of the tension.
