A developer has created a reproducible egress regression fixture to audit AI coding agents' network access, addressing the risk of prompt injection leading to data exfiltration. The fixture includes a…
The privileged status of vulnerability reports has eroded as cheap LLM-generated bug reports flood security inboxes, shifting the bottleneck from finding issues to triaging noise. Maintainers now face…
A 29-year-old bug in the Squid web proxy, dubbed Squidbleed (CVE-2026-47729), can leak cleartext HTTP requests including credentials and session tokens to authorized proxy users. The flaw, discovered …
Drydock, a new open-source tool, runs autonomous coding agents like Claude Code and OpenAI Codex in hardware-isolated VMs on macOS, preventing compromised agents from accessing API keys, filesystems, …
A 29-year-old heap buffer overread vulnerability, dubbed Squidbleed (CVE-2026-47729), has been discovered in all versions of Squid Proxy in its default configuration. The bug, found by Anthropic's Cla…
A former student who once bypassed his school's Squid proxy now proposes eliminating HTTP_PROXY environment variables entirely through transparent proxying at the system level. The approach, implement…