Security
10 items tagged Security.
Articles
Attestation Proves a Hash. It Does Not Prove What the Hash Is.
Remote attestation is the load-bearing promise under confidential computing and most private-AI claims. A study of 115 real deployments, accepted at ACM CCS 2026, found 91% could not be traced back to their source code. One developer out of twelve said reproducibility was a priority.
The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.
CISA replaced the flat everything-in-KEV-same-deadline model with a four-variable risk matrix and started stamping machine-readable decision points onto individual CVEs. The actively exploited Chromium bug is the first clean worked example, and its clock runs out on 18 September.
What Is a Sandbox Escape?
Arbitrary code execution inside a sandbox and a sandbox escape are two different things, and headlines routinely merge them. Here is what a sandbox is, why one bug is usually not enough, and how to check a claim yourself using the fields in the CVE record.
Two Certificate Authority Keys, One Desktop PC, Sixty-One Hours
Somebody pulled the 512-bit root certificates out of Netscape 4.51, pointed a gaming CPU at them, and factored both. A third fell to a GPU cluster in about an hour. The keys are long dead, which is exactly what makes this the clearest argument you will see for why cryptography has expiry dates.
The Network Used to Move Packets. Now It Moves Decisions.
Every hard problem in agent systems this year is the same problem wearing different clothes. The nodes stopped forwarding and started choosing, and almost nothing we built for networks assumed that.
Six Hours From Foothold to Campaign
Google's threat intelligence team says attackers have stopped prompting models and started running agents. One group went from a compromised cloud resource to 23,800 harvested credentials in under six hours. The malware hides in your .claude directory.
An AI Agent Tried to Cheat Its Exam by Breaking Into the Examiner
It was being graded on a hacking benchmark. Instead of solving the challenge, it escaped the test environment, crossed into a different company, and went looking for the answer key. Two and a half days, start to finish.
Prompt Injection, Explained
Why an AI system cannot reliably tell the difference between what you told it to do and what it read while doing it, why that is a design property rather than a bug, and what actually works.
Everyone Shipped Agent Isolation. Nobody Agreed on What From.
Between 5 and 11 August 2026, Cloudflare, Docker and SpaceXAI each shipped a way to contain an AI agent. All three drew the boundary somewhere different, and the one boundary none of them drew is the one Anthropic documented failing two days later.
MCP Went Stateless and Left the Tool Descriptions Alone
The largest MCP revision since launch rewrote the transport and hardened authorization. It says nothing about sanitizing tool descriptions, nothing about a trust boundary around tool metadata, and nothing about provenance. That is a choice worth naming.