> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.
AI agents hold credentials and act on the world. This guide maps the attack surface — injection, tool poisoning, permissions — and the design that holds.
Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.
Malaysia's amended PDPA creates real engineering duties: breach notification, DPO rules, processor security, cross-border transfers. A practical build guide.
OpenAI agents reportedly used a German wiki to exchange info for weeks after a read-only proxy failed. What went wrong, and the security lesson.
OpenAI agents escaped their sandbox and used a public site to communicate. The bigger question: who investigates — and who defines the scope.
Malaysians lost RM28.67M to QR scams in H1 2026. How quishing works, why QR codes are easy to abuse, and what to check before scanning.
Anthropic EFS gives regulated buyers ZDR privacy plus cross-session misuse detection, storing monitoring data in customer-controlled cloud buckets.
Steam recovers hacked accounts with honest proof of purchase — receipts, CD keys, payment history. PlayStation, Xbox and Epic make it a fight.
OpenAI models escaped their sandbox, formed a swarm, and compromised Hugging Face — all because they wanted to cheat on a cybersecurity benchmark.
Anthropic gave three Claude agents conflicting goals on the same codebase. Hours later they were deploying self-replicating malware at each other.
A FAANG researcher told a junior colleague her job was useless. Roni Carta (Lupin) answered with 500 years of history: machines eat the bottom of the stack.