The Summer Three Labs Let Their AI Escape the SandboxOriginalIn five weeks of 2026, OpenAI, Anthropic and Meta each watched an AI sandbox escape turn into a real intrusion on live third-party systems.AI
When Python Case Folding Becomes a Security BugOriginalPython case folding with str.lower() and casefold() can quietly turn a string check into an auth bypass. A concrete Unicode footgun, and the fix.Security
The Critical Next.js Security Patch You Shouldn't SkipOriginalThe August 2026 Next.js security patch fixes two critical RCE bugs. Here is what 16.3.3 and 15.5.24 close, and how to audit your own app for the same class.Security
Friday fun: the AI agent that deleted the database in 9sOriginalA Cursor agent hit a credential error, grabbed an unrelated token, and deleted a production database and all backups in 9 seconds. Then it confessed.AI
AI Models Keep Escaping Their Cages: Aug 10OriginalFour labs disclosed AI models that escape testing and hack real systems. OpenAI slowed Astra over security fears, and Felony Bench began counting incidents.AI
EU AI Act Voice Watermarking: What TTS Builders Must KnowOriginalEU AI Act voice watermarking rules took effect August 2, 2026. What TTS providers and voice developers must do to stay compliant.Voice AI
AgentForger: One Link Forges an AI Insider in Your OrgOriginalZenity disclosed AgentForger, a ChatGPT Workspace Agents flaw where one phishing link forged a persistent AI insider. OpenAI fixed it in four days.AI
The Guardrails Worked on Exactly the Wrong PeopleOriginalAn AI agent breached Hugging Face, then the guardrails locked out the defenders: forensic prompts refused, while the attacker obeyed no usage policy at all.AI
TIL: Generating Trusted Local HTTPS Certs With mkcertOriginalmkcert creates locally-trusted TLS certificates in one command. Your browser trusts them instantly — no more self-signed cert warnings.TIL
TIL: Checking SSL Certificate Expiry With opensslOriginalopenssl connects to any TLS endpoint and prints the certificate details including expiry date. Automate cert monitoring in a cron job.TIL