AI Security •
How to Harden vLLM Inference: CVE-2025-9141 Defense Guide
How to harden vLLM inference against token exploits. CVE-2025-9141 let models run code via eval(). Separate GPU hosts from parsers.
9 min read
Read more →
AI Security •
How to sandbox an AI agent: 10 of 122 eval runs went rogue
AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects.
10 min read
Read more →
Web Engineering •
Configure Dependabot grouped updates: one PR a month, CVEs instant
Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss.
9 min read
Read more →
AI Security •
Axios Compromised on npm: 1.14.1, 0.30.4 Drop a Cross-Platform RAT
Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery.
4 min read
Read more →