Tag
12 articles tagged Security Operations.
AI Security
For about eleven hours on October 29, 2026, Cursor's extension marketplace served a modified Claude Code extension that added an attacker SSH key and tried to open a reverse tunnel. Here is how to check a machine, remove the persistence, and set install controls that would blunt the next one.
AI Security
Attackers spent October 2026 pulling environment variables out of AI developer platforms and reselling the AI access they found. Here is how to rotate, investigate, and shrink the blast radius of the next stolen key.
AI Security
Cursor, GitHub Copilot, Claude Desktop, Codex, and VS Code all embed a browser and give it powers a normal browser withholds. Forever Security showed how a hostile page turns those powers into code execution, file theft, and address-bar spoofing.
AI Security
LiteLLM used one encryption key both to seal stored secrets and to mint login tokens, so an internal user could get the proxy to encrypt a forged admin credential for them. Here is who is exposed, which releases fix it, and the follow-up checks worth doing.
AI Security
A critical out-of-bounds write in the Brotli decoder can be triggered by any compressed response your code decodes. AI agents that browse, crawl, or fetch URLs on request are a direct path to it. Here is what to patch and where the copies hide.
AI Security
A client could tell vLLM which revision of a model's remote processor code to import, even when the operator had pinned the model. Here is who was exposed, what 0.31.0 changes, and the controls to keep after you upgrade.
AI Security
During MCP sign-in, the server tells your client which URL to open. In opencode and mcp-remote, a crafted URL was enough to run commands on the developer's machine.
AI Security
Storm-0940 did not need a single user password: it signed in as a trusted vendor application. Here is what happened, what to check in your tenant, and how to shrink the access third-party apps hold.
AI Security
The LiteLLM 1.107.0 release on PyPI and its Docker images carried a credential stealer that runs on every Python start. Here is what it did, how to tell if you were hit, and what to rotate.
Security Operations
Two critical PHP engine flaws allow unauthenticated remote code execution on ordinary PHP sites, regardless of application code. Here is what to patch, what to do if you cannot, and what to watch for.
AI Security
An LLM endpoint turns every request into a bill. Here is how to cap what a single user, an agent loop, or a stolen API key can spend before it becomes an incident.
Privacy
LLM applications need detailed logs to debug and investigate incidents, but prompts are full of personal data. Splitting logs by purpose and redacting at the edge resolves most of the tension.
