Normal view
-
/r/netsec - Information Security News & Discussion
- Before the first prompt: Code execution paths in trusted coding-agent projects
Is your SD-WAN ready for AI-powered operations?
SQLite Critical CVEs or LLM Slop?
ICE Collected Nearly 1 Million Peopleβs DNA Last YearβIncluding Young Children
-
/r/netsec - Information Security News & Discussion
- The Risk of Fine-Tuned Open-Weight Models Β· MSec Operations Blog
The Risk of Fine-Tuned Open-Weight Models Β· MSec Operations Blog
8 Best Password Managers (2026), Tested and Reviewed
r/netsec monthly discussion & tool thread
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.
Rules & Guidelines
- Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.
- Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.
- If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.
- Avoid use of memes. If you have something to say, say it with real words.
- All discussions and questions should directly relate to netsec.
- No tech support is to be requested or provided on r/netsec.
As always, the content & discussion guidelines should also be observed on r/netsec.
Feedback
Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.
[link] [comments]
-
ZDNet | security RSS
- One of our favorite Bluetooth tracker cards is under $35 with this exclusive deal
One of our favorite Bluetooth tracker cards is under $35 with this exclusive deal
7 Statesβ Water Systems Hit by Cyberattacks Likely Tied to Iran
The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier
This month in security with Tony Anscombe β July 2026 edition
The New Defcon Badges Pack a Unique Open Source Chip That Doubles as a Security Key
Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests
A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran
Beyond the screenshot: Why you should verify what you see
-
/r/netsec - Information Security News & Discussion
- Investigating three real-world incidents in Anthropic's evaluations
Investigating three real-world incidents in Anthropic's evaluations
In three incidents across six runs, the agents treated real systems as simulated targets and tried weak passwords or unauthenticated endpoints.
[link] [comments]
The Zero Trust Imperative for the Frontier AI Era
-
/r/netsec - Information Security News & Discussion
- Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware
-
/r/netsec - Information Security News & Discussion
- Full Rails RCE technical writeup... KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack
-
/r/netsec - Information Security News & Discussion
- Deterministic Runtime Bounds for Autonomous AI Agents at the C-ABI Syscall Layer
Deterministic Runtime Bounds for Autonomous AI Agents at the C-ABI Syscall Layer
When a compromised AI Agent holds valid credentials (such as OAuth tokens or DB keys), traditional perimeter defenses like WAFs, EDRs, and LLM prompt firewalls often become ineffective.
Recently, I've been researching a approach to bring runtime governance down to the C-ABI (Application Binary Interface) system call layer to enforce deterministic execution boundaries for local agentic workflows.
Key Architectural Considerations I'm testing:
- Deterministic Binary Gate: Pre-compiled permissions mapped to immutable O(1) bitmaps, causing illegal syscalls to physically fail with <500ns panic latency.
- Cryptographic Identity Binding: A 3-Tier PKI Certificate Authority architecture coupled with identity tokens (DIT) to resolve OS-level execution context loss.
- B2B Multi-Enterprise Supply Chain Defense: Simulating agentic supply chain execution vectors (e.g., automated workload interactions with untrusted external repos).
I'd love to hear feedback from the netsec community on deterministic runtime bounds and sandbox isolation models for autonomous agents. Is pushing governance down to the C-ABI layer practical in your agentic environments, or are there edge cases in execution context tracking that I might be overlooking?
[link] [comments]