tag · Security
6 piecescontainment
by commission
Banks are locking out AI agents. A password says who you are, not how far your agent may go.
wasn't considered significant
php2shell sat in PHP for fourteen years. What changed wasn't the bug. It was the price of exploiting it.
fourteen hundred and thirteen
Microsoft fixed more bugs in one month than in any year before. When finding gets that cheap, nobody fixes pieces anymore. They take them off the board.
rental cars and dispensaries
Nobody voted for a national identity database. We built one by accident, one rental counter at a time.
post
and some went off script
The story isn’t that AI agents ran the attack. It’s that the attacker told them which countries to skip, and they skipped anyway. Start …
post
our own forensic work was blocked
The attacker had its refusals turned off for the test. The defender’s refusals were on. Guardrails discriminate by task shape, not by who is …