Blog
Research, perspectives, and field notes on where security is heading.
The Loop
Analysis of CVE-2025-64439 in LangGraph showing how unsafe deserialization combined with serializer fallback logic creates remote code execution vulnerabilities.
· Cantina
The Loop
Production deployment context helps security teams prioritize alerts based on actual operational risk rather than severity alone.
· Cantina
The Loop
Auto-approval settings for coding agents shift execution control boundaries and require careful policy definition before rollout.
· Cantina
The Loop
GitHub's MCP server push protection now blocks secrets within agent sessions rather than at repository commit.
· Cantina
The Loop
Analysis of how untrusted input reaching MCP stdio configuration can enable local code execution attacks.
· Cantina
The Loop
Analysis of how Vercel's April 2026 security breach leveraged compromised third-party OAuth access through Google Workspace to reach deployment control-plane configuration.
· Cantina
The Loop
Security incidents in healthtech are now judged like operational failures, making continuity protection equally important as data protection.
· Cantina
The Loop
OpenSSH 10.3p1 fixes two vulnerabilities rooted in decades-old trust assumptions from Berkeley rcp.
· Cantina
The Loop
Framework for assessing AI agent governance readiness across inventory, permissions, approvals, logging, and incident response.
· Cantina
The Loop
Automated code analysis helps teams counter "vibe coding" risks from AI-assisted development by catching security flaws early and reducing alert fatigue.
· Cantina
The Loop
SaaS teams must prepare now for EU AI Act transparency obligations taking effect August 2, 2026.
· Cantina
The Loop
A security framework for governing Model Context Protocol access to prevent costly AI agent mistakes
· Cantina
Page 4 of 25 · 294 posts