zip yanked 127 of 136 versions after three extraction advisories
crates.io listed 127 of 136 zip versions yanked on 16 October. Nine remain, including 8.6.0, which one advisory names.
Wildness 2/5 · Mostly tamed
Topic · 60 stories · page 2 of 3
security
60 stories tagged security on AI Tamer, newest first.
Moynihan says Bank of America added 1,000 consultants on Mythos work
On the Q3 call, Moynihan tied a couple of hundred million plus to AML and Mythos work, and said 1,000 consultants were added.
Wildness 3/5 · Partly tamedVercel counts 1,285 sandbox reports and a Linux kernel defect
Vercel's 14 October post counts 1,285 sandbox-challenge reports and $242,000 paid, with 57 valid findings. A Linux kernel defect is the critical one.
Wildness 3/5 · Partly tamedNoma says a patched Claude Desktop preview bug could read local files
Noma says an HTML file over 256 KB in Claude Code Desktop's preview pane could read local files. The CVSS 8.7 score and the 1.30096.1 fix are Noma's account.
Wildness 4/5 · Still wildZod's 21 September malicious commits were reverted the same day. npm 4.6.6 is clean.
Two 21 September commits added a loader and a root-level preinstall key to Zod's git repo and were reverted that day. The npm tarballs for zod and @zod/mini 4.6.6 do not contain them.
Wildness 2/5 · Mostly tamedClaude Code 2.1.295 lets failed hooks block, but the hooks docs still say they won't
Claude Code 2.1.295 adds onFailure block, so a hook that crashes or times out stops the action. The hooks reference still says a timed-out hook does not block. The release also adds OSC 7501 status.
Wildness 3/5 · Partly tamedAnthropic launches a Cyber Mission and a free, unreviewed OSS Scanner
Anthropic's Cyber Mission adds a Critical Infrastructure Defense Program with 11 security partners and OSS Scanner, an opt-in service that sends open-source projects model-written vulnerability reports unreviewed.
Wildness 3/5 · Partly tamedGoogle describes an Android enclave for on-device AI data
Google's 7 October post introduces Android on-device AI seal, also called AISeal, a protected virtual machine for personal AI context. It cites SESIP Level 5 and names MediaTek and Snapdragon, with no phone list.
Wildness 4/5 · Still wildtensorlake 0.5.144 is off npm after StepSecurity flags a credential-stealing release
StepSecurity says tensorlake 0.5.144 stole credentials on install and could delete a home directory if the stolen GitHub token was revoked. As of Thursday morning UTC, npm latest is 0.5.143.
Wildness 4/5 · Still wildWhen a Tool Needs to Ask Again
MCP elicitation lets a server ask for missing input during a request. Ordinary answers use a form; credentials require a separate URL flow.
Wildness 2/5 · Mostly tamedThe File Exclusion Your Coding Agent May Not Honor
GitHub Copilot can exclude files from some features, but its content exclusion setting does not cover editor Agent mode. Here is where the boundary ends and what to check.
Wildness 4/5 · Still wildWhy OAuth Sends the Challenge Before the Verifier
Proof Key for Code Exchange ties an authorization code to a secret the client created. Following that secret through the flow shows why a stolen code is insufficient.
Wildness 2/5 · Mostly tamedWhen identical-looking names are different strings
A username can have equivalent encodings or resemble another name made from different characters. This explains what Unicode normalization and confusable detection each solve.
Wildness 1/5 · TamedA CSV Export Can Become a Spreadsheet Formula
A report cell can become a formula when a spreadsheet opens a CSV file. The right safeguard depends on who will open the export and how.
Wildness 3/5 · Partly tamedVerify a Webhook Before Starting the AI Job
Check a GitHub webhook signature against the received request body before accepting work. Then check the event, prevent duplicate jobs, and decide what the payload is allowed to trigger.
Wildness 2/5 · Mostly tamedThe URL an Agent Fetches Can Point Inward
A user-supplied URL can make a server contact private services. Here is how server-side request forgery works and how to set safe fetch boundaries.
Wildness 3/5 · Partly tamedA Token for One MCP Server Belongs to That Server
MCP resource indicators name the server a token is for. Audience checks and separate upstream tokens keep that boundary intact.
Wildness 2/5 · Mostly tamedA Cloud Deploy Without a Stored Cloud Key
A GitHub Actions job can use OpenID Connect to obtain short-lived AWS credentials. The role trust policy decides which job may deploy.
Wildness 2/5 · Mostly tamedA Model Answer Can Become Executable HTML
Generated Markdown can cross a security boundary when an app turns it into HTML. Here is how to render the answer while keeping text, links, and formatting under control.
Wildness 2/5 · Mostly tamedApple plans new consent controls for macOS Full Disk Access
Apple says it will add controls so users can grant Full Disk Access only with very explicit action. The post names no macOS version and no date. Here is what developers who ship agents on Mac should check.
Wildness 3/5 · Partly tamedMeta opens the Muse gadget SDK code with service-dependent pairing
Meta published firmware and device SDKs for Muse gadgets under Apache-2.0, with a short list of third-party exceptions. Every gadget still needs a Meta-issued token and the Muse app, and a backend change already broke voice replies.
Wildness 3/5 · Partly tamedVectors, Plainly, part 6: running a vector database in production
The parts tutorials skip: sharding and write freshness, memory and disk-based indexes, where a GPU actually pays off, and the security and compliance questions a vector store raises.
Wildness 2/5 · Mostly tamedReading a RustSec advisory before you panic
A security alert on a Rust dependency is a lookup, not an alarm. Which four fields to read first, what 'unmaintained' and 'unsound' actually mean, and a short order of response for a Rust AI project.
Wildness 1/5 · TamedSecrets in AI agent workflows: three ways they leak
API keys rarely leak through the vault. They leak through a command line other users can read, a URL that gets logged, and a conversation transcript that gets archived.
Wildness 2/5 · Mostly tamed
