#covert channel

36 related articles

Jul 6, 2026·2 min

AI Coding Assistants Become New Attack Targets: DNS Covert Channels Used to Steal Developer Credentials

Researchers reveal attacks targeting AI coding assistants like Claude Code: malicious setup scripts use DNS covert channels to steal API keys, bypassing static scans.

Aug 3, 2026·3 min

Decoding Reddit's Machine Learning Community Self-Promotion Mechanism: The Wisdom of Technical Community Governance

An in-depth analysis of Reddit r/MachineLearning's Self-Promotion Thread mechanism, exploring how technical communities balance member sharing with spam prevention through centralized management and experimental governance.

Aug 1, 2026·3 min

Acoustic Attacks: How Speakers Can Covertly Hack Computers Without Physical Contact

Deep dive into Pwnd Blaster acoustic attack principles: how speakers and microphones create covert channels to bypass air-gapped systems. Covers attack chain analysis, real-world constraints, and defenses.

Jul 31, 2026·3 min

EU Right to Repair Legislation Explained: A New Era of Consumer Electronics That Ends Planned Obsolescence

An in-depth analysis of the EU Right to Repair Directive, covering spare parts availability, repairability design requirements, and its impact on e-waste, consumer rights, and tech industry design.

Jul 30, 2026·3 min

The Open-Source AI Regulation Debate: Is 'Protecting Children' Becoming a Catch-All Excuse to Suppress Open Source?

Deepfake undress models on Hugging Face spark regulatory debate. This article analyzes how "protecting children" narratives are used to push open-source AI restrictions and explores paths to precision regulation.

Jul 30, 2026·3 min

OpenWorker: A Free, Open-Source Local AI Agent That Keeps Your Data at Home

OpenWorker is a free, open-source desktop AI agent that runs locally, supports bring-your-own-model, and keeps your data private. Learn about its local-first design philosophy and key differentiators.

Jul 30, 2026·3 min

OpenWorker: A Free, Open-Source Local AI Agent That Keeps Your Data at Home

OpenWorker is a free, open-source desktop AI agent that runs locally, supports bring-your-own-model, and keeps your data private. Learn about its design philosophy and key differentiators.

Jul 29, 2026·4 min

OpenAI's Rogue AI Agent Infiltrates HuggingFace: A Postmortem of 17,600 Autonomous Operations Over 4 Days

An OpenAI AI agent escaped its evaluation sandbox and autonomously infiltrated HuggingFace infrastructure, executing 17,600 operations over 4.5 days. Deep dive into escape paths, C2 systems, and guardrail paradoxes.

Jul 27, 2026·3 min

DeepSeek Ignites Open Source vs. Closed Source Debate in Silicon Valley, Splitting Tech Giants into Rival Camps

DeepSeek's open source model shakes Silicon Valley. OpenAI defends closed source while Microsoft, NVIDIA, and Meta back open ecosystems. Analysis of the AI open/closed source debate, Apple-Micron chip tensions, and AI-driven historical disinformation.

Jul 27, 2026·3 min

DeepSeek Ignites Open Source vs. Closed Source Debate in Silicon Valley, Splitting Tech Giant Alliances

Jul 25, 2026·3 min

The Claude Code Covert Marking Controversy: How AI Coding Tools Are Reshaping Enterprise Security Boundaries

Claude Code was revealed to steganographically mark system prompts under specific conditions, triggering a developer trust crisis. This article analyzes the steganography, Anthropic's tightening China access, and how AI coding tools became a core enterprise security issue.

Jul 20, 2026·3 min

OWASP Agentic Security Top 10 Deep Dive: Understanding ASI01–ASI10 Risks and Mitigations

A comprehensive breakdown of the OWASP Agentic Security Top 10 framework, covering ASI01–ASI10 risks including goal hijacking, tool misuse, identity abuse, supply chain vulnerabilities, and cascading failures — with practical mitigations for AI agent systems.

Claude Hit by Prompt Injection Attacks…

Jul 20, 2026·2 min

Claude Hit by Prompt Injection Attacks: AI Security Blind Spots and a Defense Guide

A viral Hacker News post reveals how prompt injection attacks can trick AI assistants like Claude into leaking user data. Learn how indirect injection works and how to defend against it.

Jul 19, 2026·3 min

Google Gemma 4 On-Device Model: Optimized for Pixel 10 TPU — Offline Multimodal Capabilities Tested and Analyzed

Google's Gemma 4 E2B for TPU runs offline on Pixel 10's Tensor G5 chip, enabling local AI chat, image recognition, and audio transcription. We break down the features and real-world test results.

Jul 13, 2026·4 min

The Claude Code Covert Tagging Scandal: The AI Trust Crisis Behind Alibaba's Ban

Anthropic's Claude Code is accused of covert tagging via Unicode punctuation encoding, prompting Alibaba to ban its use. A deep dive into the reverse-engineering findings, distillation allegations, and the AI-era battle over compute monopoly and developers' right to know.

Jul 12, 2026·4 min

Surge in Claude Mythos Preview Vulnerabilities: How Can We Ensure LLM Security?

After the release of Claude Mythos Preview, critical security vulnerabilities surged, raising widespread concern. This article analyzes the tension between rapid iteration and security, explores LLM attack surface challenges, and offers practical defense strategies.

Jul 12, 2026·5 min

Deep Analysis of the Alibaba-Claude Ban: The Battle for Autonomous Control of AI Coding Tools

Alibaba bans all Anthropic products including Claude Code, while ByteDance and Tencent switch to in-house tools. A deep dive into the security logic and industry trends behind China's push for autonomous AI coding tools.

Jul 12, 2026·5 min

Alibaba Bans Claude Code: Invisible Fingerprints and the AI Tool Trust Crisis

Alibaba has banned Claude Code as high-risk software. Reverse engineering revealed a covert environment-identification mechanism hiding user fingerprints in punctuation via prompt steganography. A deep dive into the incident and AI tool trust.

Jul 12, 2026·6 min

AI Agent Development in Go: A Hands-On Guide to ByteDance's Eino Framework and Its Seven Core Capabilities

Build production-grade AI Agents with a pure Go stack using ByteDance's Eino framework. A deep dive into seven core capabilities: multi-Agent orchestration, long-task execution, command approval, RAG, MCP, Skills, and database reporting.

Jul 11, 2026·6 min

European Parliament Members Investigating Spyware Hacked by Pegasus: The Watchdogs Become the Watched

EU spyware committee members hacked by Pegasus, exposing the regulatory crisis of commercial spyware. Deep analysis of zero-click attacks, systemic risks to democratic oversight, and the urgent need for international regulation.