Claude Code Mod to Block .env Reads: Tested (2026)
October 5, 2026
Build a Claude Code mod to block .env reads. It denies Read, Edit, Write and Bash calls on secret files, passes 5 tests, and leaks on 5 of 14 shell commands.
#ai-agent-security
AI SDK Tool Drift Detection: What It Misses in 2026
September 23, 2026
I tested AI SDK v7 fingerprintTools and detectToolDrift against a real MCP server. It catches description and schema rug pulls, but not annotation drift.
Plugin4Shell: Patch and Harden Your Coding Agent (2026)
September 21, 2026
Plugin4Shell breaks SHA pinning in four AI coding agents. Two are patched. Here's how to check your version, audit your marketplaces, and lock down the rest.
AI Agent Firewalls: The 2026 Supply Chain Problem
September 2, 2026
AIR launched with $50M and CrowdStrike unveiled Falcon Guardian on the same day. What the AI agent supply chain security numbers show — and what they do not.
Fortinet Buys Virtue AI: Agent Security M&A in 2026
August 24, 2026
Fortinet announced it had bought Virtue AI on August 17, 2026, weeks after Meta hired three co-founders. The agent-security M&A wave, and what the deals cost.
AI Agent Identity: Why Cyera Paid $1B for Oasis in 2026
July 30, 2026
Cyera signed a $1B letter of intent for Oasis Security. With machine identities at 109 per human and only 37% able to revoke an agent, identity is the new gap.
AI Agents as Insider Threats: The 2026 Security Shift
July 19, 2026
UK regulators found GPT-5.6 could be jailbroken into autonomous hacking. Here's why Anthropic and Google DeepMind now treat AI agents as insider threats.