What NIST is saying about AI agent security, and what to do before it lands
NIST summarised industry responses on AI agent security and is building control overlays for agents. The themes, the status, and steps to take now.
3 min read
Blog tag
#Agents
AI agents that plan and act: coding agents, background agents and multi-agent setups.
Sandboxing coding agents: what the built-in sandboxes do and don't cover
Claude Code and Codex both ship operating-system sandboxes for agent commands. What they restrict, what runs outside them, and settings worth enforcing.
4 min read
Small open-weight models as coding sub-agents: reading the Mellum2.1 release
JetBrains released Mellum2.1, a 12B open-weight model built for coding sub-agents. What it claims, what to verify, and where small models fit.
MCP servers keep trusting the wrong URLs: what recent advisories show
Advisories from Splunk, AWS, Google and the Rust MCP SDK share one pattern: a tool builds a request or command from input it shouldn't trust.
When model output becomes code: three agent framework advisories from October
Flowise, Langflow and PraisonAI fixed flaws where prompt injection led to code execution. The shared mistake, and what to check in your own agents.
4 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)