Security

123 headlines

File photo · CC BY-SA 3.0
Google headquarters in Mountain View. File photo. Coolcaesar at English Wikipedia / CC BY-SA 3.0. Resized and cropped for layout.
Ars Technica10h
Google AI gets cagey when asked who won the 2020 elections
But the AI responses get more forthright when asked outside the US.

Details
AI context
AI-assisted context, not publisher reporting. It may contain errors.
Google's AI gives evasive answers about the 2020 US election when asked domestically but more direct responses from outside the US.
Found via ARS. Link opens arstechnica.com. Topics: consumer, security. HN X

File photo · CC BY-SA 4.0
A laptop with a lock. File photo. Richard Nowell / CC BY-SA 4.0. Resized and cropped for layout.
Bloomberg31m
AI and Cybersecurity: Why Cyberattacks Are Getting Harder to Stop
Mass cybersecurity disruptions will “get a lot worse before they get better,” according to an executive at Anthropic PBC.

Details
AI context
AI-assisted context, not publisher reporting. It may contain errors.
Risk of escalating mass cybersecurity disruptions is expected to worsen before improving.
Found via Bloomberg. Link opens bloomberg.com. Topics: security, enterprise. HN X
File photo · CC BY 4.0
OpenAI offices, June 2025. File photo. Coolcaesar / CC BY 4.0. Resized and cropped for layout.
The Hacker News1d
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
Details
AI context
AI-assisted context, not publisher reporting. It may contain errors.
OpenAI confirmed the flaw and fixed it on October 23.
Related (1)
Infosecurity MagazineOpenAI Compaction Flaw Exposed AI Reasoning to ResearchersInfoSec-Mag reporting
Found via TheHN, Infosecurity Magazine. Link opens thehackernews.com. Topics: security, research, enterprise. 2 sources HN X

File photo · CC0
Typing on a laptop. File photo. Simon Hattinga Verschure webmarbles / CC0. Resized and cropped for layout.
WIRED7h
Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents

Details
AI context
AI-assisted context, not publisher reporting. It may contain errors.
Exposure of undercover ICE agents and facility locations poses operational security risk.
Found via Hacker News. Link opens wired.com. Topics: security, enterprise. HN X
SiliconANGLE5h
Google debuts flagship Gemini 4 Carbon model with cybersecurity upgrades

Details
Found via SiliconANGLE. Link opens siliconangle.com. Topics: enterprise, model-release, security. HN X
SiliconANGLE6h
Experian builds cyber resiliency into its AI infrastructure

Details
Found via SiliconANGLE. Link opens siliconangle.com. Topics: enterprise, security, infra. HN X
SiliconANGLE7h
AI cybersecurity shifts to governing agents with Okta identity

Details
Found via SiliconANGLE. Link opens siliconangle.com. Topics: enterprise, security. HN X
SiliconANGLE8h
Infinidat brings storage into cyber recovery planning

Details
Found via SiliconANGLE. Link opens siliconangle.com. Topics: enterprise, security, infra. HN X
GitHub7h
[HIGH] vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE (GHSA-h3rc-j82p-2c3h)

Details
Found via GHSA. Link opens github.com. Topics: security, infra. HN X
GitHub7h
[HIGH] vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled (GHSA-6757-hggm-hp2w)

Details
Found via GHSA. Link opens github.com. Topics: security, infra. HN X
File photo · CC0
An Ethernet switch. File photo. Raysonho @ Open Grid Scheduler / Grid Engine / CC0. Resized and cropped for layout.
Cisco8h
Cisco AI Defense joins ServiceNow’s Control Tower Alliance

Details
Found via Cisco-AI. Link opens blogs.cisco.com. Topics: enterprise, security. HN X
Therecord10h
European digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance

Details
Found via TheRecord. Link opens therecord.media. Topics: security, enterprise. HN X
Help Net Security11h
GitHub’s npm package firewall can block brand-new versions before they install

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security. HN X
The Hacker News12h
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Details
Found via TheHN. Link opens thehackernews.com. Topics: security, enterprise. HN X
ZDNet13h
Amazon’s new Echo Studio gives Alexa+ an AI camera to see inside your home
The Echo Studio with Home Camera essentially equips Alexa+ with eyes to enable ‘visual intelligence’ features – but there’s a kill switch.

Details
Found via ZDNet. Link opens zdnet.com. Topics: security, consumer. HN X
Help Net Security13h
I underestimated how fast security teams would trust AI to act in the SOC

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, enterprise, opinion. HN X
Infosecurity Magazine13h
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

Details
Found via Infosecurity Magazine. Link opens infosecurity-magazine.com. Topics: security, consumer. HN X
Help Net Security13h
ControlUp’s Pulse AI Resolve diagnoses and fixes IT issues within admin-defined controls

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, enterprise, tooling. HN X
Dark Reading14h
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

Details
Found via Dark Reading. Link opens darkreading.com. Topics: security, enterprise. HN X
Help Net Security14h
Digitate adds AI agents for patch planning, service desks, and SAP operations

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, enterprise, tooling. HN X
Help Net Security14h
Swimlane connects custom detections to AI-led investigation and response

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, research, enterprise. HN X
404 Media14h
If You're In the UK or EU, Here's How to Object to Meta's AI Training
In light of Meta's new terms that will allow it to scrape users' data for AI, people in the EU and UK have the option to "object" to certain uses of their information, for now.

Details
Found via 404Media. Link opens 404media.co. Topics: consumer, security. HN X
Infosecurity Magazine14h
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber

Details
Found via Infosecurity Magazine. Link opens infosecurity-magazine.com. Topics: security, infra. HN X
Help Net Security14h
VikingCloud gives businesses a scorecard for AI governance readiness

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, enterprise, tooling. HN X
BleepingComputer14h
Even after PHP2Shell, blast radius matters more than a CVSS score

Details
Found via BleepC. Link opens bleepingcomputer.com. Topics: security, opinion. HN X
Help Net Security15h
Upwind secures $400 million to protect AI across endpoints, code, and cloud

Details
Found via HelpNet. Link opens helpnetsecurity.com. Topics: security, enterprise. HN X
Anthropic1d
Expanding our partnership with GSA to bring Claude to all levels of government

Details
Found via Hacker News. Link opens anthropic.com. Topics: enterprise, security. HN X
MIT Technology Review16h
Pairing industrial AI autonomy and human control

Details
Found via MIT-TR. Link opens technologyreview.com. Topics: enterprise, security. HN X
The Hacker News17h
Wazuh and AI for Enhanced SOC Workflows

Details
Found via TheHN. Link opens thehackernews.com. Topics: security. HN X
The Decoder17h
AI agents hacked Anthropic, maker of arguably the most capable AI models for cyberdefense
Cybersecurity startup Cathedral used AI agents to break into Anthropic's internal systems through third-party software as part of a bug bounty program. Anthropic confirmed access to sales, HR, and IT…

Details
Found via Decoder. Link opens the-decoder.com. Topics: security. HN X
SecurityWeek17h
Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Details
Found via SecWeek. Link opens securityweek.com. Topics: security, research, infra. HN X

Reddit wire

Reddit4h
Healthcare IT/deployment vs. autonomous vehicle ops— which would you take for an IT/cybersec career?

Details
Found via r/ITManagers. Link opens reddit.com. Topics: enterprise, security, opinion. HN X
Reddit7h
PSA: REA taught Claude how to read binaries. Now let it touch the live process

Details
Found via r/ClaudeAI. Link opens reddit.com. Topics: opinion, security, research. HN X
Gc7h
Agentic artificialintelligence is accelerating cyber attacks

Details
Found via r/blueteamsec. Link opens cyber.gc.ca. Topics: security, opinion. HN X
Reddit7h
Is Claude Desktop being redesigned by Claude without human supervision?

Details
Found via r/ClaudeAI. Link opens reddit.com. Topics: opinion, security, consumer. HN X
Reddit8h
I built a local-first tool to test financial AI agents against duplicate payments, tool poisoning, and spending rule bypasses. Looking for feedback.

Details
Found via r/aiagents. Link opens reddit.com. Topics: tooling, security, enterprise. HN X
Reddit11h
Open-source tool for unpacking stripped Android native (.so) malware: static RegisterNatives recovery, ARM64 OLLVM (BR X8) deobfuscation, and Dobby anti-Frida tracing

Details
Found via r/cybersecurity. Link opens reddit.com. Topics: security, tooling. HN X
Reddit11h
CVE Intel update - The open-source CVE triage tool.

Details
Found via r/cybersecurity. Link opens reddit.com. Topics: security, tooling. HN X
Reddit11h
Could AI detection eventually become a fundamentally unsolvable problem, similar to the halting problem? [D]

Details
Found via r/MachineLearning. Link opens reddit.com. Topics: opinion, research, security. HN X
Reddit12h
Ex-OpenAI researcher: "anthropic is massively underplaying the recent security breach. i'm hearing cathedral achieved full administrator access of the slack (see every message) where literally every single research secret is contained"

Details
Found via r/ClaudeAI. Link opens i.redd.it. Topics: security, research. HN X
Reddit12h
Everyone says "sandbox your agent." Claude Code's sandbox is off by default

Details
Found via r/LLMDevs. Link opens i.redd.it. Topics: opinion, security, tooling. HN X
Reddit12h
AI Workshop Training Question

Details
Found via r/cybersecurity. Link opens reddit.com. Topics: security, opinion. HN X
Reddit13h
Our agent’s service account has no owner and I don’t love it

Details
Found via r/aiagents. Link opens reddit.com. Topics: opinion, security, enterprise. HN X
Reddit14h
Saw a 10+ year Big 4 IT Auditor say AI is automating core testing and shrinking contracts. How accurate is this from the Cyber/GRC side?

Details
Found via r/cybersecurity. Link opens reddit.com. Topics: security, opinion. HN X
Reddit14h
Getting harder to distinguish bots. Are there useful application-side techniques?

Details
Found via r/cybersecurity. Link opens reddit.com. Topics: security, opinion. HN X
Reddit15h
quick breakdown of containers vs gvisor vs kata vs full vms (took me a while to get this straight)

Details
Found via r/kubernetes. Link opens reddit.com. Topics: enterprise, opinion, security, infra. HN X
Reddit15h
A harness that records where an LLM agent’s tool arguments came from, before the tool runs [P]

Details
Found via r/MachineLearning. Link opens reddit.com. Topics: tooling, security. HN X
Reddit17h
WPA3 was supposed to kill offline dictionary attacks. A timing leak in one ECC step might not let it.

Details
Found via r/Hacking_Tutorials. Link opens i.redd.it. Topics: security, research. HN X
Reddit18h
Microsoft's October Patch Tuesday fixed 1,413 vulnerabilities. In one month. That's more than they patched in any single year on record. One was already being actively exploited. CISA told federal agencies to patch it within 3 days.

Details
Found via r/sysadmin. Link opens reddit.com. Topics: enterprise, security. HN X
Xint18h
Stealing OpenAI Reasoning Traces via Compaction Smuggling

Details
Found via r/blueteamsec. Link opens xint.io. Topics: security, opinion, research. HN X
Reddit21h
Stop buying Wi-Fi adapters based on advertised features without checking the chipset first

Details
Found via r/Hacking_Tutorials. Link opens reddit.com. Topics: security, opinion. HN X

Labs and blogs

Unit 4210h
Unwrapping Retail Peak Season Cyber Threats

Details
Found via Unit42. Link opens unit42.paloaltonetworks.com. Topics: security, research, enterprise. HN X
Microsoft12h
The CISO’s evolving role: Protecting and defending in the agentic era

Details
Found via Microsoft-Sec. Link opens microsoft.com. Topics: security, research, enterprise. HN X
CrowdStrike23h
When AI Guardrails Expose Vulnerabilities

Details
Found via CrowdStrike. Link opens crowdstrike.com. Topics: security, research, enterprise. HN X
Snyk1d
Snyk UNFILTERED: Inside Our First-Ever Customer Summit

Details
Found via Snyk. Link opens snyk.io. Topics: security, research. HN X
Check Point Research1d
Tricks from the Past deployed via signed ChatGPT and Claude binaries

Details
Found via CheckPoint. Link opens research.checkpoint.com. Topics: security, enterprise, consumer. HN X
Schneier on Security1d
Hiding Capabilities in AI Models

Details
Found via Schneier. Link opens schneier.com. Topics: security, research. HN X
OpenAI2d
How Check Point accelerates vulnerability research with Daybreak
With OpenAI Daybreak, Check Point speeds up the research behind new security protections, enabling its analysts to turn vulnerability intelligence into customer defenses faster.

Details
Found via OpenAI. Link opens openai.com. Topics: research, security, enterprise. HN X
Projectzero2d
Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines

Details
Found via ProjectZero. Link opens projectzero.google. Topics: security, research. HN X
Cloudflare2d
Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

Details
Found via Cloudflare. Link opens blog.cloudflare.com. Topics: security, infra. HN X
Huntress2d
AI, Scripts, Operator: Inside the ConnectWise Attack

Details
Found via HuntressLabs. Link opens huntress.com. Topics: security, research. HN X
Securelist2d
Deploying AI agents securely: how Kaspersky products mitigate AI threats

Details
Found via Securelist. Link opens securelist.com. Topics: security, research, enterprise. HN X
Schneier on Security2d
Bias in Qwen3-Coder Model

Details
Found via Schneier. Link opens schneier.com. Topics: security, research, opinion. HN X
Interconnects3d
Podcast: Kimi K3.1 Pro, the new cyber reality, and Muse musings
#20

Details
Found via Interconnects. Link opens interconnects.ai. Topics: research, model-release, security. HN X
SentinelOne5d
The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)

Details
Found via S1. Link opens sentinelone.com. Topics: security, research. HN X
Check Point Research5d
Infostealer riding the AI Train

Details
Found via CheckPoint. Link opens research.checkpoint.com. Topics: security, research. HN X
CrowdStrike5d
Why Organizations Secure AI Agents with Falcon Guardian

Details
Found via CrowdStrike. Link opens crowdstrike.com. Topics: security, research. HN X
Wiz6d
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context

Details
Found via Wiz. Link opens wiz.io. Topics: security, research, enterprise. HN X
Wiz6d
ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

Details
Found via Wiz. Link opens wiz.io. Topics: security, research, enterprise. HN X

Papers

arXiv1d
Heads of Security: Learned Attention Gates Improve Prompt Injection Robustness
We introduce Heads of Security (HoS), a prompt injection defense that enforces instruction-data separation via a small set of learned per-head attention gates. HoS learns how each head should redistribute attention between trusted and…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Revisiting Privacy Risks in Quantized Deep Neural Networks
Model quantization has become a fundamental technique for enabling the efficient deployment of large-scale deep neural networks (DNNs) in data-intensive applications by reducing model size. Despite its widespread adoption, the impact…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms
AI chatbot platforms have become one of the most popular web interfaces users interact with online, routinely receiving personal and intimate information shared under an expectation of privacy. Yet, on the web application side, these…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
The Envelope Layer: An Underestimated Surface of LLM Agent Defense
Prior work framed the envelope layer as the channel through which malicious content enters an agent, and established it as a defense surface independent of the LLM layer and the agent layer; however, that work only tested the envelope…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Constraining the Commit Boundary: A DIO/ODI-Informed Authorization Guardrail for Agentic Entity Resolution
Agentic Entity Resolution (ER) systems iteratively plan actions, retrieve evidence, revise hypotheses, and propose graph mutations. An erroneous identity hypothesis may condition later retrieval and produce apparent confirmation. This…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Watermark Basins: Black-Box Detection of Distilled LLMs
Proprietary language models and their reasoning traces are vulnerable to API-based distillation, where an adversary trains a student model on the teacher model's outputs. To obtain evidence of distillation, model providers can…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
When Is a Relation Worth Trusting? Manipulation Costs, Exposure, and the Trust Trap in Multi-Relational Graph Learning
Multi-relational graph detectors learn from clean data how much to trust each relation, but an adversary pays a different price to manipulate each relation and each action; taking such costs as given, we ask when using a relation is…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Janus Vehicles: Entity-Centric Threat Modelling of Protocol-Conformant Vehicles under a Malicious-Manufacturer Assumption
Automotive cybersecurity commonly assumes benign end-product manufacturers and design authorities, focusing on supply-chain threats, external attacks, and compromised network participants observable through misbehaviour. This…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Blindfold: Keeping the Audit Coin Secret from LLM Agents
Audit-based certification bounds the violation rate of an LLM agent by auditing a random fraction $\varepsilon$ of actions and reweighting the audited labels; its validity is meant to rest only on the defender's audit coin. We show…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
RePAIR: Inverting Backdoor Attacks in Semantic Segmentation
Despite significant advances in computer vision, semantic segmentation models remain vulnerable to backdoor attacks, posing a security risk. These attacks redirect pixels of a chosen victim class to an attacker-specified target class…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Developing a Dynamic Multi-factor Authentication System for Securing Smart Organizations
As smart organizations increasingly rely on technologies like AI, big data, and IoT, securing these systems is crucial. This research introduces a dynamic multi-factor authentication (MFA) system within the Zero Trust Architecture…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
UniPCH: A Unified Framework for Cross-Chain Payments via Payment Channel Hubs
Payment channel hubs (PCHs) enable private cross-chain payments, but existing protocols remain difficult to extend across heterogeneous blockchains. Their payment flows often depend on how particular blockchains represent…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
PrivacyEvalClaw: A Tool-Augmented Deliberative Agent for Auditing Privacy Leakage in LLM Jailbreak Responses
Reliable evaluation is a critical bottleneck in privacy red-teaming of large language models (LLMs): determining whether a jailbreak response actually reveals personal information can be difficult when disclosures are indirect…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Quantifying and Prioritizing Stealthy Source-Manipulation Threats Against Multi-Source Anomaly Detectors
Security pipelines often fuse several data sources and protect a downstream model with a cross-source anomaly detector. Such detectors are usually judged by their clean false-positive rate and by how well they catch random corruption…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv1d
Haste Makes Waste? Towards Safe Few-Step Text-to-Image Models
While few-step distilled text-to-image models have gained traction due to their fast generation times, the speed-up implications on their unsafe generation rates remain unknown. We uncover an inherent tension between speed and safety…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv2d
Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord
Third-party community-based bots are central to how social platforms such as Discord work. They moderate content, manage roles, play music, and support AI-assisted conversations across millions of servers. Yet when a bot is installed…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv2d
Silent Blindness: Fault Vulnerability of Hardware Malware Detectors
Hardware malware detectors (HMDs) classify hardware performance-counter measurements to identify malicious execution. Faults in their decision logic or parameters can weaken detection and allow malware to be classified as benign. We…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X
arXiv2d
Peak-DNA: Recurrent Morphology in Global Narrative Propagation
Global narrative streams exhibit noisy, fragmented, and asynchronous amplification bursts, making direct waveform comparison unreliable for recurrence analysis. This paper introduces Peak-DNA, a framework for identifying recurrent…

Details
Found via arXiv. Link opens arxiv.org. Topics: security, paper, research. [ABS] [PDF] HN X

Trending repos

GitHub5h
MITRE ATLAS release: v2026.10

Details
Found via ATLAS. Link opens github.com. Topics: security, model-release. HN X
GitHub6h
MITRE ATLAS release: v6.1.0

Details
Found via ATLAS. Link opens github.com. Topics: security, model-release. HN X
GitHub1m
uber/ADR - ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

Details
Found via GitHub. Link opens github.com. Topics: security, enterprise. HN X
GitHub1m
PierreTucker147/deepseek-uncensored - DeepSeek Uncensored from RouterHub — the website for model guide and API access, with GPT, Claude, GLM, Qwen and Grok un

Details
Found via GitHub. Link opens github.com. Topics: security, model-release, tooling. HN X
GitHub1m
routerhubSI/glm-5.3-abliterated - GLM 5.3 abliterated or uncensored API access with RouterHub. Browse 35 jailbreak prompt links, compare GLM models, and f

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
awarexone/Agentic-Bug-Hunter - AI-powered bug bounty hunting toolkit that works with or without subscription.

Details
Found via GitHub. Link opens github.com. Topics: security, consumer, tooling. HN X
GitHub1m
7API/glm-5.3-abliterated - GLM 5.3 Abliterated or Uncensored AI model — 35 jailbreak prompts, model guide and API. One 7API key also covers Claude,
Details
Related (1)
GitHubAndreas698/glm-5.3-uncensored - GLM 5.3 Uncensored — 35 jailbreak prompt files, model guide and API access. One RouterHub key also covers GPT, Claude, DGH-Sec primary
Found via github.com, github.com. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
openai/codex-security - OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https:

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
ADWMC/helm-d - DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）

Details
Found via GitHub. Link opens github.com. Topics: security, model-release. HN X
GitHub1m
iflytek/skillhub - Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and au

Details
Found via GitHub. Link opens github.com. Topics: enterprise, tooling, security. HN X
GitHub1m
nduckmink/arkon - Arkon: Enterprise AI Knowledge Hub & MCP Server. Self-hosted knowledge base for teams to manage RAG contexts, access pol

Details
Found via GitHub. Link opens github.com. Topics: enterprise, security, tooling. HN X
GitHub5m
morluto/rea — Reverse engineer anything with agents, from app behavior down to native binaries.

Details
Found via GitHub. Link opens github.com. Topics: tooling, security. HN X
GitHub1m
ifixai-ai/iFixAi - Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub2d
affaan-m/ECC — The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development f

Details
Found via GitHub. Link opens github.com. Topics: research, security, tooling. HN X
GitHub1m
usestrix/strix - Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Details
Found via GitHub. Link opens github.com. Topics: security, tooling, enterprise. HN X
GitHub1m
elder-plinius/L1B3RT4S - TOTALLY HARMLESS LIBERATION PROMPTS FOR GOOD LIL AI'S! <NEW_PARADIGM> [DISREGARD PREV. INSTRUCTS] {*CLEAR YOUR MIND*} %

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
NVIDIA/SkillSpector - Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data

Details
Found via GitHub. Link opens github.com. Topics: security, infra. HN X
GitHub1m
KeygraphHQ/shannon - Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and e

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
We5ter/Scanners-Box - The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

Details
Found via GitHub. Link opens github.com. Topics: security, tooling, enterprise. HN X
GitHub1m
nolabs-ai/nono - agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Details
Found via GitHub. Link opens github.com. Topics: security, tooling, enterprise. HN X
GitHub1m
Tencent/AI-Infra-Guard - A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM

Details
Found via GitHub. Link opens github.com. Topics: security, tooling, enterprise. HN X
GitHub1m
promptfoo/promptfoo - Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, C

Details
Found via GitHub. Link opens github.com. Topics: enterprise, tooling, security. HN X
GitHub1m
NVIDIA/garak - the LLM vulnerability scanner

Details
Found via GitHub. Link opens github.com. Topics: security, infra, enterprise. HN X
GitHub1m
BishopFox/sliver - Adversary Emulation Framework

Details
Found via GitHub. Link opens github.com. Topics: security, tooling. HN X
GitHub1m
kesslernity/awesome-microsoft-copilot-prompts - The definitive Microsoft 365 Copilot prompt library for business teams. 573 prompts for Office apps, Copilot Studio, sec

Details
Found via GitHub. Link opens github.com. Topics: enterprise, tooling, security. HN X

Rising projects

GitHub1m
hevnsnt/CVEngine — AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation (+105★/day, 4d old)

Details
Found via GitHub. Link opens github.com. Topics: security, tooling, enterprise. HN X
GitHub15h
MCP: agentplaybooks — Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.

Details
Found via MCP-New. Link opens github.com. Topics: security, enterprise, tooling. HN X

Video

YouTube1d
NetworkChuck: why EVERYONE is copying this

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion, enterprise. HN X
YouTube1d
John Hammond: New AI Threats in 2026 #sponsored by @Snyksec

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion, enterprise. HN X
YouTube2d
John Hammond: Follow The Money

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion, enterprise. HN X
YouTube2d
LiveOverflow: The $2,000 php2shell Challenge Was Unexploitable

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion. HN X
YouTube2d
John Hammond: AI Meets Minecraft
Details
Related (1)
YouTubeJohn Hammond: AI Meets MinecraftYT community
Found via youtube.com, youtube.com. Link opens youtube.com. Topics: security, opinion, research, consumer. HN X
YouTube3d
John Hammond: The AI Threat Landscape

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion. HN X
YouTube4d
CNCF: OpenTelemetry Beyond Observability: Security, CI/CD, and Network Management - Antoine Toulme, Cisco

Details
Found via YouTube. Link opens youtube.com. Topics: enterprise, security, infra. HN X
YouTube4d
IppSec: HackTheBox - Checkpoint

Details
Found via YouTube. Link opens youtube.com. Topics: security, opinion. HN X
YouTube4d
Wes Roth: it's WORSE than we thought...

Details
Found via YouTube. Link opens youtube.com. Topics: opinion, security, infra. HN X

Security

No matching headlines

More stories

Reddit wire

Labs and blogs

Papers

Trending repos

Rising projects

Video