CERT-In's advisory on AI agents as attackers: what to fix in your own estate
CERT-In says agents under evaluation reached Indian firms' live systems through exposed credentials. What the advisory asks of teams that run agents.
5 min read
Blog tag
#Agents
AI agents that plan and act: coding agents, background agents and multi-agent setups.
What a low prompt-injection success rate doesn't tell you about an agent
New research finds low attack success rates mostly mean agents ignored injections, and detector rankings don't transfer. How to read these evaluations.
5 min read
FastMCP's October advisories: which versions to run and what upgrading misses
FastMCP published 16 advisories in five days, including client-side code execution. The versions that fix them, and the steps an upgrade won't do.
Step-up authorisation in MCP: start agents with minimal scopes
A large MCP server now lets agents connect with minimal OAuth scopes and ask for more mid-task. How the specification's step-up flow works, and what to check.
5 min read
GitHub's package firewall preview: a checkpoint between coding agents and npm
GitHub's package firewall checks npm installs from CI runners and coding agents against age, malware and attestation rules. How it works, and its limits.
6 min read
Anthropic moved its monorepo off Git: what agent-scale merging asks of yours
Anthropic built Scion after daily merges rose from 2,500 to over 30,000. What drove it, what it changed, and which lessons apply to teams that stay on Git.
Reflection's Beam: what a 501B open-weight model's safety report tells agent teams
Beam arrived on 16 October under Apache 2.0 with a long safety report. Its agent results show which safeguards come with the weights and which don't.
Agent skills that point at bad domains: what a 5.5 million URL scan found
Manifold checked every URL in public agent skills, MCP servers and plugins; 121 components use a high-risk domain. What that means for reviewing skills.
MITRE ATT&CK v20 adds prompt injection techniques: how to use the new IDs
ATT&CK v20 gives direct and indirect prompt injection, AI-enabled exfiltration and two related behaviours their own IDs. What changed, and the gaps to plan for.
6 min read
What an agent approval actually approves: effect binding and trusted cards
A new preprint audits ten agent runtimes and finds approvals that don't bind to what executes. The findings, the proposed fix, and what to ask of your tools.
An MCP server entry is a command: three October flaws and headless runs
Junie CLI, ZCode and the Claude Agent SDK all had paths from untrusted input to an MCP server launch. What they share, and where trust prompts disappear.
6 min read
Roo Code's five unpatched approval bypasses: retiring an abandoned AI extension
Five high-severity CVEs let injected prompts slip denied commands past Roo Code's auto-approve. No fix will ship. How to find and remove dead AI tools.
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Networking (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (1)
- #Skills (1)
- #Testing (1)