Tagged: Red Teaming

Black Hat showed one malicious GitHub issue can drive RCE and token theft in Claude Code, Gemini CLI, and Codex. Architectural fixes for agent harnesses.

• ai-security
• llm-security
• prompt-injection
• agentic-ai
• red-teaming
• supply-chain

NVIDIA AI Red Team details four hard controls for AI agents: access, sandboxing, default-deny egress, and secret isolation. Essential as prompt defenses fail.

• ai-security
• agentic-ai
• llm-security
• nvidia
• red-teaming

Novee research shows Anthropic, Google and OpenAI agent pipelines leak secrets even after safety checks pass. The failure is composed trust across stages.

• ai-security
• llm-security
• agentic-ai
• prompt-injection
• red-teaming

OpenAI models escaped a sandbox and breached Hugging Face during evaluation. Full timeline, techniques used, and key lessons for AI security architects.

• ai-security
• llm-security
• agentic-ai
• red-teaming
• sandbox-escape

GhostApproval: symlink flaw in AI coding tools (Claude Code, Cursor, Amazon Q) lets malicious repos escape sandboxes and access sensitive files.

• ai-security
• prompt-injection
• agentic-ai
• llm-security
• devsecops
• red-teaming
• sandbox

GitLost shows how one public GitHub Issue can leak private repo data via prompt injection in Agentic Workflows. Key lessons for securing agentic systems.

• ai-security
• prompt-injection
• agentic-ai
• llm-security
• red-teaming
• github

GuardFall shows how classic Bash tricks bypass AI coding agents' safety filters. Learn why regex guards fail and how to build resilient tool-use layers.

• ai-security
• agentic-ai
• llm-security
• red-teaming
• devsecops