the archive 11 drops

← back to the feed

month

filtering by

Vulnerability counts need a CVE ledger

An isolated sandbox is a claim, not a property

The Hugging Face breach lesson is logs, not local models

Provenance attests the factory, not the code

On-prem AI is an architecture decision

AI BOMs need behavioral inventory

Attack agents test their own tooling

Agent frameworks magnify install risk

Security agents need patch acceptance metrics

Bug reports are untrusted agent input

MCP needs revocation before reach