Poisoned rule files can make coding agents import the wrong package
Researchers hid instructions in AGENTS.md-style rule files and got coding agents to swap real dependencies for attacker packages. What it means for teams.
Blog tag
#Agents
AI agents that plan and act: coding agents, background agents and multi-agent setups.
Infostealers now collect AI coding assistant credentials: what to change
Symantec and Elastic found malware taking AI coding tool credentials from developer machines. What was taken, and how to limit the damage.
When a repository's git config runs code: ConfigPoisoning and coding agents
GitLab researchers showed a coding tool running attacker code from a repository's own git filters. Why deny-lists fail, and what to ask of tools that run git.
5 min read
Singapore's handbook for assessing AI coding assistants, and how to use it
CSA Singapore published a security assessment handbook for agentic coding assistants: six attack vectors, 25 tiered controls and a risk method you can reuse.
The tensorlake npm worm: planted agent settings and a revoke-first trap
A poisoned tensorlake release stole developer credentials, planted Claude Code and VS Code settings in repositories, and punished revoking tokens first.
6 min read
Three Claude advisories in October, for fixes that shipped months earlier
Anthropic published three high-severity Claude Code and Claude Desktop advisories in October. The fixes date from May and June: how to tell if you are behind.
5 min read
MCP SDKs can now check a token's audience, but only if you turn it on
The MCP Python and TypeScript SDKs accepted tokens issued for other services. The fix is opt-in: what to upgrade, what to configure and how to test it.
Copilot computer use is in preview: setting rules for desktop-driving agents
Copilot CLI and the Copilot app can now operate desktop apps, in public preview. What the controls are, where the risks sit, and a starting policy for teams.
5 min read
Shrink a coding agent's credential blast radius with secret proxies
NCSC guidance and Copilot's sandbox proxy point the same way: agents should not hold real secrets. How credential proxies work, their limits, and a checklist.
5 min read
NCSC's sandbox maturity levels for agentic AI, explained for engineering leads
The NCSC grades agent sandboxes on two four-level ladders, network and compute. How to use them as a scorecard now that local agent sandboxes are shipping.
5 min read
Anthropic's Max and Team API credits: how they change agent experiments
Claude Max and Team plans now include monthly Claude Platform credits for building agents. What they cover, what they exclude, and what finance should track.
5 min read
NVIDIA OpenShell and the case for agent controls outside the harness
NVIDIA's open-source OpenShell enforces agent policy outside the model and harness. What version 0.1.0 does, what is only a reference design, and what to copy.
5 min read
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)