A Trailing Dot Beat the Agent's Edit Gate: Check the Path the OS Will Open, Not the String the Model Sent
TL;DR What was reported: CVE-2026-103572 (Microsoft rates it Important, CVSS 8.8 per the researcโฆ
AI tools, cybersecurity and development news aggregated from top sources โ saved permanently with unique URLs.
A Trailing Dot Beat the Agent's Edit Gate: Check the Path the OS Will Open, Not the String the Model Sent
TL;DR What was reported: CVE-2026-103572 (Microsoft rates it Important, CVSS 8.8 per the researcโฆ
I Built Spyhound: Open-Source Spyware Detection Directly on Android
Detecting sophisticated Android spyware is difficult, especially for people without access to a compโฆ
[Boost]
Building ArewaSafe: How We Used Gemma 4 & Disguise UX to Protect Highway Commuters in Northern Nigerโฆ
Least-privilege Azure RBAC for read-only architecture review
TL;DR: Least-privilege Azure RBAC for a read-only architecture scanner is the Reader action */read pโฆ
Doing authorized security work in the terminal with free abliterated models
You paste a stack trace from your own app and ask how the bug could be exploited, so you can fix it โฆ
Google Disrupts Backdoors in Over 1.3 Million Android Devices, Deliberately Planted by Manufacturer Videostrong
Backdoors were embedded in the firmware of more than 1.3 million Android devices during manufacturinโฆ
Your agent's run log can catch tampering without holding a word of what the agent saw
An AI agent's run log can catch someone editing it without containing a single word of what the agenโฆ
What is an AI agent? A practical definition, three use cases and the guardrails they need
Adapted from an article originally published in French on closiqode.com. An AI agent is software thโฆ
Hadolint vs Cloud (IaC) Security: Dockerfile linting in IntelliJ IDEA
Hadolint is the Dockerfile linter most guides recommend, and it still waves through a latest tag hidโฆ
A Simple Pre-Launch Security Checklist for PHP Apps
A small pre-launch review can catch avoidable problems before a PHP app goes live. Use this checklisโฆ
ESO vs Secrets Store CSI Driver on EKS: Two Ways to Deliver an AWS Secret
In my last post an app in EKS read a database password from AWS Secrets Manager through ESO (Externaโฆ
Fine Grained Password Policies - FGPP
Giriล รn Koลullar FGP Oluลturmak Policy'nin Uygulandฤฑฤฤฑnฤฑ Teyit Etmek Giriล Tek biโฆ