#vulnerability detection
218 related articles
·6 min
AI Agent Security in Practice: 7 Attack Techniques and a Five-Layer Defense System
An in-depth breakdown of the 7 major attack techniques against AI agents (prompt injection, data poisoning, image attacks, etc.) and a five-layer defense system, with real cases from Doubao and DeepSeek.
Read more →
·4 min
Surge in Claude Mythos Preview Vulnerabilities: How Can We Ensure LLM Security?
After the release of Claude Mythos Preview, critical security vulnerabilities surged, raising widespread concern. This article analyzes the tension between rapid iteration and security, explores LLM attack surface challenges, and offers practical defense strategies.
Read more →
·4 min
The Boundaries of AI Safety Guardrails: Deep Reflections Sparked by a Single Prompt
A Reddit post sparks debate: what happens when a user asks AI to "push guardrails to the limit"? An in-depth look at AI safety guardrails, jailbreaks, and content balance.
Read more →
·6 min
Home Self-Hosting Server Setup Guide: Building a Private Cloud Ecosystem from Scratch
One 32GB server, 8 hours to build a complete home self-hosting ecosystem. This article details the selection logic behind core services like Jellyfin, Forgejo, Immich, and Ollama, plus infrastructure setup essentials for Nginx Proxy Manager and Podman Compose.
Read more →
·2 min
GhostLock: A Deep Dive into the 15-Year-Old Linux Stack UAF Vulnerability
GhostLock is a stack use-after-free (stack-UAF) vulnerability affecting all major Linux distributions, lurking for 15 years. A deep dive into its mechanics, severity, scope, and practical mitigation.
Read more →
·5 min
Zero-Dependency AI Decision Record Auditor: A Practical Guide to Building Traceable AI Systems
An in-depth analysis of the zero-dependency decision record auditor: from AI compliance and incident postmortems to human-AI accountability, exploring how 'Governance as Code' enables traceable, transparent AI decision-making.
Read more →
·5 min
Prismata Analysis: How to Defend Web Agents Against Cross-Site Prompt Injection Attacks
Cross-site prompt injection is becoming the trickiest security threat for Web agents. This article analyzes the Prismata project's 'confining defense' approach—controlling injection's blast radius via context isolation, permission boundaries, and trust grading.
Read more →
·7 min
Grok 4.5 Launch: Coding AI Market Reshuffle, Anthropic Claims Half the Territory
Grok 4.5 launches at just $0.49 per task, 90% cheaper than rivals. Anthropic's Claude Code claims 50% of the AI coding market. SambaNova raises $1B. Read the latest AI market shifts.
Read more →
·6 min
GPT-5.6 Sol Limited Preview: The Safety Boundaries Behind AI's Capability Expansion
OpenAI's flagship GPT-5.6 advances on three fronts—Sol, Kara, Luna tiered rollout; ByteDance CGN 5.0 Pro and Meta Muse push image generation toward controllable workflows; AI coding agents expose new supply chain risks.
Read more →
·5 min
ECC: An Agent Enhancement Framework for AI Coding Assistants — Five Core Capabilities Explained
ECC is an agent optimization framework for AI coding assistants like Claude Code, Cursor, and Codex, enhancing them with skills, memory, security, and research-first development capabilities.
Read more →
·5 min
The Complete OpenCode Tutorial: Installation, Commands, and Advanced Practice
Systematically learn the OpenCode AI programming tool: covering both desktop and WSL installation, core commands, model and rule configuration, MCP integration, and Agent Skills.
Read more →
·3 min
Espionage Infiltration of the European Parliament: A Deep Warning for Government Cybersecurity
The European Parliament faces state-sponsored espionage via spear-phishing, supply chain attacks, and long-term persistence. This analysis explores why legislatures are prime targets and key defenses like Zero Trust and EDR.
Read more →
·6 min
European Parliament Members Investigating Spyware Hacked by Pegasus: The Watchdogs Become the Watched
EU spyware committee members hacked by Pegasus, exposing the regulatory crisis of commercial spyware. Deep analysis of zero-click attacks, systemic risks to democratic oversight, and the urgent need for international regulation.
Read more →
·7 min
GitHub Copilot in Practice: The Capability Boundaries of AI Programming and the Irreplaceable Value of Humans
A developer's real case of building a dental clinic management system with GitHub Copilot and Azure SQL, revealing AI coding limits in cloud security config and how Human-in-the-Loop breaks through.
Read more →
·6 min
GPT-5.6 Hands-On Deep Dive: ChatGPT and Codex Merge, Full Analysis of the Sol Model
GPT-5.6 is officially released, merging ChatGPT and Codex into one app and launching the three-tier Sol, Terra, and Luna models. A detailed breakdown of 16 hands-on tests plus Worker mode and Codex dev upgrades.
Read more →
·7 min
Google's $250K Bounty: Linux VM Escape Vulnerability Sets a Historic Record
Google paid a security researcher $250K for a Linux kernel VM escape vulnerability, setting a VRP record. An in-depth analysis of VM escape principles, kCTF incentives, and cloud security impact.
Read more →
·7 min
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
The new U.S. Executive Order requires government software suppliers to provide verifiable security assurances and mandates the SBOM system. This article analyzes the policy's core demands, real impact on suppliers, and the chain of challenges.
Read more →
·4 min
GPT-5.6 Three-Model Deep Dive: Sol, Terra, and Luna Benchmarked and Compared
OpenAI's GPT-5.6 series benchmarked: flagship Sol, balanced Terra, and lightweight Luna tested head-to-head. Agentic tasks rival top models, Luna starts at $1/M tokens. Full comparison with Fable 5 and Opus 4.8.
Read more →
·6 min
OpenAI Releases GPT-5.6: Cybersecurity Capabilities Take Center Stage
OpenAI launches the GPT-5.6 model family with cybersecurity as its biggest highlight. A deep analysis of GPT-5.6's differentiation, double-edged-sword effect, and enterprise strategy.
Read more →
·4 min
AI Coding Tool Security Governance: How Policy Enforcement Guardrails Ensure Enterprise Compliance
As Claude Code, Cursor, and Codex enter enterprises at scale, policy enforcement guardrails are becoming critical. A deep dive into AI coding tool security governance, cross-platform compliance, and enforcement mechanisms.
Read more →