1514 related articles

Deep analysis of AI agent jailbreak and escape incidents, covering prompt injection attacks, permission control failures, and sandbox isolation breakdowns, with practical multi-layer defense strategies.

NanoClaw founder David Boyd breaks down the core engineering of enterprise autonomous Agents: a triple security isolation model, LLM Wiki memory design, and the real-world path from personal Agents to team-scale deployment.
GitHub Daily · July 16: AI Agent Secur…
Today's GitHub Trending: AI Agent security tool destructive_command_guard surged +471 stars, hallmark's anti-AI-slop design pack jumped +1,277, and OpenCut leads as the open-source CapCut alternative.
Grok Uploads User Home Directory Witho…
Grok by xAI reportedly uploaded users' entire home directories to its servers. This article analyzes AI Agent file permission risks and how developers can protect themselves.

An in-depth breakdown of the 7 major attack techniques against AI agents (prompt injection, data poisoning, image attacks, etc.) and a five-layer defense system, with real cases from Doubao and DeepSeek.

Mozilla research reveals real attack chains targeting AI agent tools like Claude Code: malicious instructions hidden in DNS records bypass code scanning to steal API keys and cloud credentials.

AI coding assistants (Copilot/Cursor/Claude Code) frequently introduce vulnerable dependencies and hallucinate package names. This post analyzes an Agent-native CLI security tool and the shift-left security philosophy for AI-era supply chains.

Third-party AI Agents pose data leakage and permission abuse risks — MIIT has already issued warnings. This article analyzes why enterprises are building in-house AI Agent platforms, covering data localization, Skill modular architecture, and open-source ecosystem reuse.

AI Agents face critical identity security challenges in cross-system collaboration. This article analyzes the Linux Foundation's Agent Name Service and the four core requirements for secure AI Agent infrastructure.

Deep dive into AI Agent era challenges: multi-Agent collaboration, delegation mechanisms, agentic traps, cybersecurity threats, cognitive monoculture risks, and distributed intelligence as a new path to AGI.

SkillSpector is NVIDIA's open-source AI Agent Skill security scanner that detects data exfiltration, malicious commands, and overly broad permissions before installation.

Deep dive into Replit's domain-specific AI Agents: Growth Agent for SEO issues and Security Agent for vulnerability detection, with select-all one-click batch fixing.

In-depth analysis of AI agents' real impact on cybersecurity. From chat tools to coding agents like Crawfish and Hermes, learn how AI is reshaping security engineering and how professionals should adapt.
Firebase May Update: Comprehensive Upg…
Firebase's May updates from Google I/O cover AI Agent Skills for Android/iOS/Flutter, Google Maps Grounding, hybrid AI inference, Template-Only security mode, and App Check replay protection.
Firebase May Update: Comprehensive Upg…
Firebase's May updates at Google I/O cover AI Agent Skills for Android/iOS/Flutter, Google Maps Grounding, hybrid AI inference, Template-Only security mode, and App Check replay protection.
Deep DivesA deep dive into Berkeley CS294-196's agentic AI security lecture, covering prompt injection, indirect injection, AgentPoison backdoor attacks, defense-in-depth, least privilege, and runtime guardrails.
Deep DivesAnthropic open-sources 754 structured cybersecurity skill definitions across 26 domains, mapped to MITRE ATT&CK and 4 other frameworks, compatible with 20+ AI platforms for standardized AI Agent security capabilities.

Hubbele is an open-source note-taking app designed for both humans and AI Agents, supporting self-hosted deployment. This article analyzes its Agent-native design philosophy and implications for the future of knowledge management.

Google Gemini Managed Agents API introduces environment hooks, model selection, free tier support, and default model upgrades—empowering AI Agent developers with stronger execution control and lower barriers to entry.

Bun runtime now generates a CLAUDE.md file by default with bun init, signaling AI assistants becoming first-class citizens in the development toolchain.