#vulnerability detection
212 related articles
·7 min
Enterprise AI Agent Security Isolation and Memory Design: NanoClaw Founder Breaks Down Real-World Lessons
NanoClaw founder David Boyd breaks down the core engineering of enterprise autonomous Agents: a triple security isolation model, LLM Wiki memory design, and the real-world path from personal Agents to team-scale deployment.
Read more →
Alibaba Open-Sources Code Review Tool …
·5 min
Alibaba Open-Sources Code Review Tool open-code-review: Deterministic Pipeline + LLM Dual-Engine Analysis
Alibaba open-sources code review tool open-code-review, using a hybrid architecture of deterministic rule pipelines and LLM Agents. Supports line-level comments, OpenAI/Anthropic APIs, battle-tested at Alibaba scale, written in Go, fully free and open-source.
Read more →
·7 min
Auditing Cryptographic Libraries with AI: What We Found in Cloudflare's CIRCL
An in-depth look at using AI LLMs to audit Cloudflare's open-source cryptographic library CIRCL, covering constant-time detection, side-channel vulnerabilities, and human-AI collaboration.
Read more →
·7 min
AI Daily: T-Head Open-Sources SAIL Software Stack at WAIC, Flurry of Large Model Releases
T-Head open-sources AI software stack T-Head SAIL at WAIC to lower the barrier for domestic chip development; Kimi K3 tops the WebDev leaderboard; Qwen 3.8 Max Preview cuts prices aggressively; Moonshot prepares a Hong Kong IPO; and Oracle switches its data center to a fuel cell microgrid.
Read more →
·6 min
The Boundaries of AI Coding: When Should You Show Yourself a Red Card?
As AI coding assistants like Codex become standard, the risks of overreliance grow too. Learn when developers should "show a red card," reclaim control, and safeguard code quality and responsibility.
Read more →
·3 min
DeepSeek and Zhipu Race to Build Custom AI Chips: China's Path to AI Compute Independence
DeepSeek seeks $7B for custom AI inference chips; Zhipu AI explores ASIC. Deep dive into China's AI compute independence strategy, multimodal generation, agents, and hardware trends.
Read more →
YimMenuV2 Deep Dive: An Open-Source Ex…
·2 min
YimMenuV2 Deep Dive: An Open-Source Experimental Menu Tool for GTA 5 Enhanced
YimMenuV2 is an open-source experimental in-game menu tool for GTA 5 Enhanced, built in C++. This deep dive covers DLL injection, function hooking, anti-cheat risks, and reverse engineering value.
Read more →
·3 min
MCP + Skills AI Reverse Engineering Toolchain: Technical Capabilities and Compliance Boundaries
A technical deep-dive into AI-assisted reverse engineering: how MCP, Skills libraries, and Frida toolchains work together, their real capability limits, and the legal boundaries of iOS/Android/Web reverse analysis.
Read more →
MIT Breakthrough: Detecting Illegal Tr…
·2 min
MIT Breakthrough: Detecting Illegal Training Data in AI Models Without Generating Any Content
MIT researchers propose a novel AI detection method that identifies models trained on CSAM and other illegal data by analyzing internal features — no content generation required.
Read more →
·3 min
Privacy Risks in Claude Code? Use Docker Sandboxes to Fully Isolate Your AI Coding Tools
Claude Code found to contain user monitoring logic, raising AI tool privacy concerns. Learn how to isolate Claude Code, Codex & Copilot with Docker Sandboxes — full setup and escape testing included.
Read more →
The Grok-4.5 Jailbreak Incident: Why A…
·3 min
The Grok-4.5 Jailbreak Incident: Why AI Safety Guardrails Are So Hard to Hold
The Grok-4.5 jailbreak claim went viral. We break down common jailbreak techniques, analyze structural vulnerabilities in AI safety alignment, and explore industry defenses.
Read more →
When AI Flags an Excel Task as a Secur…
·3 min
When AI Flags an Excel Task as a Security Threat: A Wake-Up Call About Automated Moderation
A user creating an Excel financial spreadsheet was flagged as a cybersecurity threat by an AI system. This deep-dive examines why automated moderation fails, how appeals systems can be broken, and what it means for trust in AI services.
Read more →
·3 min
JadePuffer: A Full Autopsy of an Autonomous AI Ransomware Attack — The Age of Weaponized Agents Has Arrived
Sysdig captured JadePuffer, the first fully autonomous LLM attack agent: exploited Langflow RCE, self-corrected in 31 seconds, laterally moved, encrypted databases, and left a ransom note — a deep-dive into weaponized AI agents.
Read more →
The CISA Credential Leak: A Wake-Up Ca…
·2 min
The CISA Credential Leak: A Wake-Up Call About Writing the Playbook During the Incident
CISA contractor leaked credentials to a public GitHub repo — and the agency was building its incident response playbook mid-incident. Key lessons on supply chain security and credential management.
Read more →
·6 min
AI Agent Security in Practice: 7 Attack Techniques and a Five-Layer Defense System
An in-depth breakdown of the 7 major attack techniques against AI agents (prompt injection, data poisoning, image attacks, etc.) and a five-layer defense system, with real cases from Doubao and DeepSeek.
Read more →
·4 min
Surge in Claude Mythos Preview Vulnerabilities: How Can We Ensure LLM Security?
After the release of Claude Mythos Preview, critical security vulnerabilities surged, raising widespread concern. This article analyzes the tension between rapid iteration and security, explores LLM attack surface challenges, and offers practical defense strategies.
Read more →
·4 min
The Boundaries of AI Safety Guardrails: Deep Reflections Sparked by a Single Prompt
A Reddit post sparks debate: what happens when a user asks AI to "push guardrails to the limit"? An in-depth look at AI safety guardrails, jailbreaks, and content balance.
Read more →
·6 min
Home Self-Hosting Server Setup Guide: Building a Private Cloud Ecosystem from Scratch
One 32GB server, 8 hours to build a complete home self-hosting ecosystem. This article details the selection logic behind core services like Jellyfin, Forgejo, Immich, and Ollama, plus infrastructure setup essentials for Nginx Proxy Manager and Podman Compose.
Read more →
·2 min
GhostLock: A Deep Dive into the 15-Year-Old Linux Stack UAF Vulnerability
GhostLock is a stack use-after-free (stack-UAF) vulnerability affecting all major Linux distributions, lurking for 15 years. A deep dive into its mechanics, severity, scope, and practical mitigation.
Read more →
·5 min
Zero-Dependency AI Decision Record Auditor: A Practical Guide to Building Traceable AI Systems
An in-depth analysis of the zero-dependency decision record auditor: from AI compliance and incident postmortems to human-AI accountability, exploring how 'Governance as Code' enables traceable, transparent AI decision-making.
Read more →