security 22
- plugin marketplaces are the new endpoint policy for coding agents
- VEX turns container scanning into queue discipline
- agent sandboxes are the new enterprise desktop
- container escape is becoming an agent workload
- your CI agent is reading more than your prompt
- coding agents made repositories the security boundary
- permission prompts are not an agent security strategy
- the developer laptop is the first production environment for agents
- some Kubernetes vulnerabilities do not have patches
- github's agent audit api is the boring feature that matters
- Watch out - that recruiter profile might be a scam. Check here first.
- How to safely inspect a repository before running anything on your machine
- Watch out, your recruiter might be a scam
- containers are becoming policy wrappers for ai agents
- From capital one to unreviewed AI code the same ssrf, different decade
- github failed at the only thing they should do: git
- nodes/proxy Was Never a Monitoring Permission
- User Namespaces Are a Bigger Container Milestone Than Most Docker Headlines
- MCP Adoption Is Accelerating Faster Than Agent Governance
- AI Agent Governance Is Becoming the Real Internal Platform
- MicroVMs Are Becoming the New Container Boundary for AI Work
- The LiteLLM Supply Chain Attack — What AI-Dependent Codebases Should Audit