PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From Concept to Capability: Required Security Changes for Secure AI Agents

josephthacker.com | blog | #ai-security | #sandboxing | #authentication | #ai-agents | #llm | #api | #security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Joseph Thacker argues that useful AI agents need hardened sandboxes, agent-native authentication, and API-ification of legacy systems before they can safely handle real-world tasks.
Published
Collected

Related coverage

tool · projectdiscovery.io
How Neo's Agent Architecture Evolved: From One Agent → Plan, Execute & Verify
Neo evolved from a sandboxed agent into a plan-execute-verify architecture with parallel subagents, driven by context, duration, and quality limits. Longest runs hit 14.7 hours and 2,398 tool calls.
blog · blog.trailofbits.com
SAML: A fractal of bad design
Trail of Bits traces SAML's committee-driven origins and argues the 2002 XML-based SSO protocol should finally be retired: cursed XML signature validation keeps producing vulnerabilities, and OIDC is the way forward.
blog · blog.trailofbits.com
Prompt injection to RCE in AI agents
Argument injection into pre-approved 'safe' commands bypasses human approval gates in AI agents, yielding RCE on three popular platforms; sandboxing and argument separation can limit the impact.
blog · blog.trailofbits.com
Microsoft didn’t sandbox Windows Defender, so I did
A Trail of Bits researcher released Flying Sandbox Monster, a Rust framework sandboxing Windows Defender's MsMpEng in AppContainers, arguing Microsoft left this high-privilege surface unprotected.
blog · bishopfox.com
SearchDiggity: Avoid Bot Detection Issues by Leveraging Google, Bing, and Shodan APIs
How to stop SearchDiggity scans from being blocked by Google's bot detection: use the official Google, Bing and SHODAN APIs instead of scraping, avoiding CAPTCHA and 15-minute auto-resume pauses.
blog · bishopfox.com
Guide to Hardening Your Firefox Browser in OS X
Bishop Fox's guide to hardening Firefox on OS X: disable unneeded plugins to shrink attack surface, add security extensions, sandbox the browser, and shift browsing habits to blunt web-based attacks.
Back