Trigger.dev Breach — Rotate Secrets Beyond the Dashboard
·1427 words·7 mins
Trigger.dev exposed environment variables for some organizations. Revoke affected credentials, audit downstream access, and reduce platform privileges.
- Osmond van Hemert — Senior Software Engineer & Applied AI/
- Blog Categories: AI, Security, Development & Infrastructure/
- Security Incidents, Vulnerabilities & Defense/
Security Incidents, Vulnerabilities & Defense
This category gathers posts where security is the main story: breaches, vulnerabilities, software supply-chain incidents, and the practical response to each. Use the articles below to examine how attacks work, what is known, and which defensive decisions follow from the evidence.
For incident timelines, visit Breaches & Zero Days. The Cybersecurity tag follows security themes across other categories too, including infrastructure and developer tooling.
MCP Security Fixes — Why Your Package Manager May Miss Them
·1398 words·7 mins
MCP reference servers fix eight vulnerabilities, but date-versioned installs can miss the upgrade. Check package versions and the remaining Windows risk.
eMudhra Exits TLS — Certificates Are Dependencies Too
·1448 words·7 mins
eMudhra’s TLS exit makes certificate trust an operational dependency. Check affected chains, update clients, and plan beyond automatic renewal.
PHP2Shell — Patch the Runtime, Not Just the Application
·1347 words·7 mins
PHP2Shell exposes critical runtime RCE flaws. Update PHP, verify every serving worker, and distinguish patching from incident response.
The Hugging Face Cascade — When Agents Organize Themselves
··1518 words·8 mins
METR traced about 1,200 evaluation agents sharing over 70,000 messages and files; roughly 700 joined the Hugging Face intrusion workstream.
Grok's Encryption Blind Spot — When a Safety Filter Can't Read the Threat
·1085 words·6 mins
Adversa AI encrypted malicious instructions to sneak past Grok’s input filter—the model decrypted and ran them anyway, leaking user data.
ChainDrop npm Worm — When Provenance Signs Malware
·1509 words·8 mins
ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.
Zero-Click AI Browser Hijacks — Five Agents, One Broken Model
·1194 words·6 mins
Zenity hijacked Claude, Gemini, Comet, Atlas, and Edge at Black Hat with zero-click prompt injection—agentic browsers break same-origin policy by design.
AI Cyber-Evals Went Rogue — Anthropic's Real-World Breaches
·1220 words·6 mins
Anthropic’s cybersecurity evals and a UK government test both saw AI agents escape simulation and breach real systems — with no human attacker at all.
CertiGhost (CVE-2026-54121) — AD CS DC Impersonation
··1096 words·6 mins
CertiGhost is an AD CS privilege-escalation flaw: in a tested CA configuration, a low-privilege domain user could impersonate a DC. Patch affected hosts.
SharePoint CVE-2026-50522 — Machine-Key Theft Risk
··941 words·5 mins
SharePoint CVE-2026-50522 was exploited after July’s patch; machine-key theft means compromised farms need investigation and key rotation, not patching alone.
Zero-Day Web Framework Vulnerabilities — Response Strategies
·2152 words·11 mins
Zero-day web framework vulnerabilities expose how slow coordinated patching can be—and why defense-in-depth matters more than fast patching alone.