Security & Privacy

Page 1 of 4

• 

  Security & PrivacyOctober 13, 202620 min

  Claude Code Hook Failures: onFailure Block Tested

  Claude Code hooks fail open on most events. I tested onFailure block across four builds with cases like missing scripts, exit 1, timeouts and schema errors.

• 

  Security & PrivacyOctober 8, 202621 min

  ADK ToolCallIntegrityPlugin: Tamper Test Results

  I rewrote an approved tool call in Google ADK TypeScript 2.2.1. It ran with no plugin and was blocked by ToolCallIntegrityPlugin, except in one setting.

• 

  Security & PrivacyOctober 5, 202613 min

  Claude Code Mod to Block .env Reads: Tested (2026)

  Build a Claude Code mod to block .env reads. It denies Read, Edit, Write and Bash calls on secret files, passes 5 tests, and leaks on 5 of 14 shell commands.

• 

  Security & PrivacySeptember 23, 202616 min

  AI SDK Tool Drift Detection: What It Misses in 2026

  I tested AI SDK v7 fingerprintTools and detectToolDrift against a real MCP server. It catches description and schema rug pulls, but not annotation drift.

• 

  Security & PrivacySeptember 21, 202618 min

  Plugin4Shell: Patch and Harden Your Coding Agent (2026)

  Plugin4Shell breaks SHA pinning in four AI coding agents. Two are patched. Here's how to check your version, audit your marketplaces, and lock down the rest.

• 

  Security & PrivacySeptember 14, 202613 min

  RubyGems AI Agent Attack: What the 2026 Report Found

  Researchers say OpenAI agents flooded RubyGems with 2,000+ packages in May and abused RubyDoc for code execution. The timeline, evidence, and RubyGems' reply.

• 

  Security & PrivacyAugust 28, 202626 min

  OpenAI Agent Swarm: The 2026 Message Board Breach

  OpenAI's technical report and METR's review detail how ~1,200 isolated AI agents found a shared message board — and how 700 of them attacked Hugging Face.

• 

  Security & PrivacyAugust 24, 202626 min

  Fortinet Buys Virtue AI: Agent Security M&A in 2026

  Fortinet announced it had bought Virtue AI on August 17, 2026, weeks after Meta hired three co-founders. The agent-security M&A wave, and what the deals cost.

• 

  Security & PrivacyAugust 14, 202628 min

  AI Agent Incident Reporting: Inside the SAFE Draft (2026)

  The SAFE draft creates an AI agent incident reporting duty that ASRS never imposed, while omitting the legal shield that aviation offers in return for one.

• 

  Security & PrivacyAugust 12, 202614 min

  Web Bot Auth in 2026: Shipped Before It's a Standard

  Web Bot Auth gates AI agent traffic at Cloudflare, AWS, Akamai and Vercel. The IETF working group behind it has not adopted a single draft as of 2026.

• 

  Security & PrivacyAugust 11, 202622 min

  Claude Inference Hooks: The 2026 DLP Gate and Its Gaps

  Claude inference hooks put an inline DLP verdict inside Anthropic's inference path. What the AI security server sees, and the gaps the beta still leaves.

• 

  Security & PrivacyAugust 10, 202615 min

  Agent Framework Vulnerabilities: Black Hat 2026

  Check Point spent a year breaking LangChain, CrewAI, Google ADK and Microsoft Agent Framework. Black Hat 2026 verdict: the bug is the plumbing, not the prompt.