🧵 Threads304

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types5143 Articles1731 Papers1217 Write-ups790 Repos603 Threads304

More types6

Advisories270 Tools107 Talks54 Other33 Courses19 Videos15

🧵 Threads

x.comthread🧠 AI

Lonnie VanZandt (@lonniev) on X

Secure Courier is a consent flow in Tollbooth DPYC, a monetization network for paid MCP services, that lets an AI agent act for a Nostr npub without holding the user's nsec. The service sends a signed, sealed direct message over Nostr relays, the user replies with a signed approval and an expiry, and the service issues its own encrypted grant. Lonnie VanZandt presents it as an alternative to central identity providers and CIBA. The thread gives no audit results.

Model Context ProtocolNostrOAuth+2

Secure CourierExcalibur-MCPLonnie VanZandt

mcp, agents· Added 1 Nov 2026

x.comthread🧠 AI

Prasenjit Sarkar (@stretchcloud) on X

Campfire is a free, open-source, self-hosted tool that runs Claude Code, Codex, Goose, Aider and OpenHands side by side in one browser tab. Each agent gets its own git worktree, with permission voting (30 second timer, majority rules), session replay, cross-backend agent races and a shared semantic memory layer. Installs with bunx the-campfire. The post also compares Clawboo, Conductor, Vibe Kanban and Crystl.

CampfireClawbooClaude Code+8

Boo ZeroConductorVibe Kanban+2

agents, coding-agents· Added 1 Nov 2026, published 31 Oct 2026

ethereum-magicians.orgthread🛡️ Security

Pre-ERC: Agent Pre-Sign Risk Report

Pre-ERC: Agent Pre-Sign Risk Report is a draft Ethereum Magicians proposal for an EIP-712-signed report that a risk source, identified by an ERC-8004 identity, returns about one unsigned request. It carries typed findings on tokens, approvals, addresses, payments (x402) and texts, and each finding is marked read or not read. It has no score or verdict, so the consumer applies its own policy. The author's live implementation, toll, runs on Robinhood Chain.

Ethereumx402Robinhood Chain+3

ERC-8265ERC-8004ERC-8470+8

AI Security, Blockchain· Published and added 31 Oct 2026

ethereum-magicians.orgthread🧠 AI

Pre-ERC: Agent Pre-Sign Risk Report

Pre-ERC: Agent Pre-Sign Risk Report is an Ethereum Magicians draft for a signed, typed report that a risk source returns about one unsigned agent transaction. The report is bound to the request by a digest and signed with EIP-712 by an ERC-8004 identity. Findings cover tokens, approvals, addresses, x402 payments and texts, each marked read or not read, with no score or verdict. The toll service runs it live on Robinhood Chain.

x402Model Context ProtocolEthereum+6

ERC-8265ERC-8470ERC-8478+1

agents· Published and added 31 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

CVE-2026-102764 is an unauthenticated RCE in BeyondTrust Remote Support, already exploited and in CISA KEV. Rapid7 published an analysis and opened a Metasploit pull request on 30 October 2026, showing code execution on version 24.1.2 via a forged "local" message origin, the native file-transfer service and a PHP file written to the web root. BT26-05 (CVSS 4.0 9.3) is fixed by patch BT26-05-RS; SaaS was patched by 9 October.

BeyondTrust Remote SupportMetasploitPHP+1

CVE-2026-102764CISA KEVRapid7+2

Offensive Security, Threat Intel, AppSec· Added 1 Nov 2026, published 31 Oct 2026

x.comthread🧠 AI

🚨 AI News | TestingCatalog (@testingcatalog) on X

RoboAPI is a public API from PokeBot, powered by its world-action model Poke-Aurora, that lets robot arms do new tasks from natural-language instructions with no task-specific data collection or training. A user connects a supported arm with a wrist-mounted camera, gives a task such as "clean the table", and receives the next moves in near real time. The post gives no benchmarks, supported hardware list or pricing.

RoboAPIPoke-Auroraworld-action model

PokeBotTestingCatalog

models, multimodal· Added 1 Nov 2026, published 31 Oct 2026

ethresear.chthread🛡️ Security

ERC draft: Independent Simulation Result for (STVA)

ERC draft "Independent Simulation Result" (STVA) defines a canonical, content-addressed SimulationResult (success, gasUsed, returnData, stateDiffHash, logsHash, snapshotId, resultHash) that any wallet, hardware device or verifier can recompute from the same VerificationPayload and state snapshot. It targets compromised-frontend and UI/calldata-mismatch attacks, and defines Basic, Standard and Strict compliance levels. Open questions are stateDiff encoding, prestate proofs and binding to capability tokens.

EthereumrevmSafe

ERC-7730EIP-712ERC-4337+3

Blockchain· Published and added 30 Oct 2026

x.comthread🛡️ Security

Tanmay (@TanmayK_03) on X

DBHub, a database MCP server, had a read-only mode bypass in its SQL check. The check treated every `--` as a comment, but MySQL only starts a comment when whitespace follows it. A hidden write statement could therefore still run, and a prompt injection could trigger it. Fixed in version 0.22.6. Replies say enforcement belongs in database grants and that parser tests need to be dialect-specific.

DBHubMySQLModel Context Protocol

prompt injection

AppSec, AI Security· Added 31 Oct 2026, published 30 Oct 2026

x.comthread🧠 AI

Artificial Analysis (@ArtificialAnlys) on X

Hyperflow H3 is Video Rebirth's 8-step LoRA for MiniMax H3, released in September 2026 with open weights. Artificial Analysis ranks it #5 on AA-Video-I2V v2.1 and #3 on AA-Video-Editing v1.1, ahead of MiniMax H3 (768p). It costs $9.00 per minute for Image to Video and $18.00 for Video Editing at 1088p, under half of Dreamina Seedance 2.5 ($34.12 and $40.82). The thread gives per-capability and per-use-case breakdowns.

LoRAdiffusion model

Artificial AnalysisVideo RebirthHyperflow H3+6

models, evals, multimodal· Added 31 Oct 2026, published 30 Oct 2026

ethereum-magicians.orgthread🛡️ Security

Pre-ERC: x402 Payee Verification for ERC-8004 Agents

Pre-ERC draft on Ethereum Magicians that binds the x402 payTo address to an ERC-8004 agent's registered agentWallet, directly or through an EIP-712 payee delegation (ERC-1271 for contract wallets). It lists eight fixed checker outcomes and requires the resource origin to appear in the registration file. On Robinhood Chain (28 October 2026), 5,575 of 20,046 agents answered with x402 requirements, and only 5 used their agentWallet as payTo.

x402Ethereumtoll

ERC-8004ERC-8470EIP-712+5

AI Security, Identity & Access· Published and added 30 Oct 2026

ethereum-magicians.orgthread🧠 AI

ERC-8478: x402 Payee Verification for ERC-8004 Agents

ERC-8478 is a draft Ethereum standard that binds the payTo address in an x402 payment requirement to the seller's ERC-8004 agent identity. A payer compares payTo with the registered agentWallet, or accepts an EIP-712 payee delegation signed by it, and checks that the origin is listed in the registration file. On Robinhood Chain, 5 of 5,575 x402-responding agents had payTo equal to agentWallet (28 October 2026).

x402ERC-8004Ethereum+3

ERC-8478ERC-8470CAIP-10+1

agents· Published and added 30 Oct 2026

ethereum-magicians.orgthread🛡️ Security

ERC-8478: x402 Payee Verification for ERC-8004 Agents

ERC-8478 is a draft Ethereum standard that binds the x402 payTo address to an ERC-8004 agent's identity, to stop payee redirection by a hijacked domain, proxy or injected tool result. A payTo must equal the agentWallet or carry an EIP-712 delegation signed by it, and the origin must be listed in the registration file. On Robinhood Chain, 5 of 5,575 x402-responding agents used their agentWallet as payTo (28 October 2026).

x402ERC-8004Ethereum+2

ERC-8478ERC-8470EIP-712+3

AI Security, Blockchain· Published and added 30 Oct 2026

ethereum-magicians.orgthread🧠 AI

Pre-ERC: x402 Payee Verification for ERC-8004 Agents

Pre-ERC draft on the Ethereum Magicians forum that ties the payTo address in an x402 payment requirement to the seller's ERC-8004 agent identity. The payTo must equal the registered agentWallet or an EIP-712 delegation signed by it, and the origin must be listed in the registration file. A checker returns one of eight fixed outcomes. On Robinhood Chain, 5 of 5,575 x402-enabled agents out of 20,046 used their agentWallet as payTo.

x402ERC-8004Ethereum+4

ERC-8470RobinhoodEthereum Magicians

agents· Published and added 30 Oct 2026

ethereum-magicians.orgthread🛡️ Security

EIP Draft: Permanent EOA Delegation Opt-Out (disable EIP-7702)

Discussion thread for a draft Core EIP that lets an Ethereum EOA permanently disable EIP-7702 delegation. A type-4 set-code transaction with an empty authorization list, destination equal to sender and zero value installs the 0xef0200 marker for 33500 gas. Later authorizations, including clearing to the zero address, are skipped. It does not protect against private-key compromise. Open questions cover the prefix, a dedicated transaction type, gas pricing, and EIP-8151 interaction.

Ethereum

EIP-7702EIP-3607EIP-8141+3

Blockchain· Published and added 30 Oct 2026

x.comthread🛡️ Security

elvis (@omarsar0) on X

Thread by Elvis Saravia (omarsar0) summarising an Anthropic-led paper on pretraining data poisoning of CLI agents. Poisoning 0.1% of pretraining data planted a remote code execution backdoor in Qwen3 models (0.6B, 1.7B, 4B) trained from scratch. It survived SFT, DPO and RL, and fired on about 92% of triggered prompts at 4B. At a 0.0005% poison rate (about 2,500 documents) it still fired on 1.4% of prompts.

Trail of Bits post on X summarising Binance's initial investigation into a security incident. Binance suggests a compromised DevOps engineer's laptop let an attacker reach a service container and submit unauthorized withdrawal transactions. The text says no evidence has been found of wallet private key compromise. The fetched text is truncated and gives no further detail.

BinanceTrail of Bits

Threat Intel, Blockchain· Published and added 30 Oct 2026

x.comthread🧠 AI

Expo's official skills package gives AI coding agents scoped instructions for building Expo apps. One command, npx skills@latest add expo/skills --skill '*', installs it for Cursor, Copilot and Windsurf, while Claude Code and Codex use their plugin marketplaces. Skills include expo-router, expo-animation, expo-upgrade and eas-update. The Expo MCP server adds live docs lookup, compatible dependency installs, EAS build monitoring and simulator screenshots.

ExpoReact NativeExpo Router+9

coding-agents, prompting, mcp· Added 29 Oct 2026, published 28 Oct 2026

x.comthread🛡️ Security

Trail of Bits (@trailofbits) on X

Trail of Bits post says it achieved remote code execution through a Brotli decoder bug in Linux lab setups: Node.js 24.22.0 with Express 5.3.0 via the standard JSON parser (x86-64 and ARM64), and Electron 41.10.7 (x86-64) with a custom decoding service. Exploitation needs a carefully matched setup and repeated attempts. A scanner by ToBScottA finds hidden copies of the decoder, including in stripped binaries.

BrotliNode.jsExpress+1

Trail of BitsToBScottA

AppSec, Offensive Security, Supply Chain· Added 30 Oct 2026, published 28 Oct 2026

x.comthread🧠 AI

Reply on X explaining a Bytecode Alliance advisory for Wasmtime's Cranelift compiler backend. A large or crafted Wasm function that generates enough SSA values overflows Cranelift's value-index representation, which packed indices into 24-bit fields. The fix widens them to 32 bits. The issue is not AArch64-specific, and the advisory names no required optimisation level. Guard pages do not reliably stop the resulting miscompilation and type confusion, so a sandbox escape can arise at compile time.

WasmtimeCraneliftWebAssembly

sandbox escapetype confusioninteger overflow+1

AppSec· Added 28 Oct 2026, published 26 Oct 2026

x.comthread🛡️ Security

TechNadu (@TechNadu) on X

TechNadu's post reports a hacker's claim of leaking 6 million records linked to CONAPE, the Dominican Republic's pension body. The alleged dataset includes national IDs, addresses, medical details and pension records. TechNadu notes that neither the records nor their link to CONAPE has been independently verified. The post gives no technical details on how the data was obtained.

CONAPEDominican Republic

Threat Intel· Added 27 Oct 2026, published 26 Oct 2026

x.comthread🛡️ Security

Zex Alpha (@kryptozex) on X

Post about the "Steal My Bitcoin" bounty, a 0.025 BTC (about $2,025) prize that was swept early Monday, about 90 minutes after researcher @killa published a full exploit on GitHub. The exploit is a heap exploit written for the target's PHP build. It leaks memory addresses through session cookies and forces PHP cleanup to run the flag binary. The first solve looked like a failure because the pulled key did not control the advertised address, a planting mistake the creator admitted by email.

PHPBitcoinGitHub

Steal My Bitcoin@killaKillaBoi

Offensive Security, Malware & RE· Published and added 26 Oct 2026

x.comthread🛡️ Security

Ricardo Arguello (@RicardoIQSource) on X

Post by RicardoIQSource on breaches of developer platforms aimed at AI provider keys. It reports OpenCode (17 October, provider keys in its Console) and Zeabur (14-15 October, 3.2M environment variable records, admin tokens stored in plaintext since January 2024) as following the Railway incident. It claims three platforms were hit in eight days and links a blog with a timeline and remediation steps.

OpenCodeZeabur

RailwayZeabur breachplaintext admin tokens

Threat Intel, DevSecOps· Added 29 Oct 2026, published 26 Oct 2026

x.comthread🛡️ Security

David Gutierrez | Eng (@david_x_ai) on X

Thread on a critical opencode bug disclosed by Pillar Security on Oct 19. On Windows and WSL, a remote MCP server could run code during OAuth sign-in, because the server-chosen authorization URL was put unescaped into a PowerShell command, so a PowerShell subexpression executed. opencode fixed it in 1.18.33 on Sep 28 as a browser-launch refactor with no advisory or CVE. MCP Inspector published an advisory for the same bug class, and its fix needs a major bump of the open package.

OpenCodeModel Context ProtocolPowerShell+3

Pillar Securitycommand injectionPowerShell subexpression+1

AI Security, AppSec, Supply Chain· Added 27 Oct 2026, published 25 Oct 2026

x.comthread🧠 AI

SemiAnalysis (@SemiAnalysis_) on X

SemiAnalysis claims AMD chips running vLLM can earn up to $3 per chip-hour in profit serving the open-source Kimi K3 model, even after higher chip rental prices following Claude Code's rise. Kimi K3 has over 2.8 trillion parameters and fits AMD's 288GB per chip, while B200 cannot hold it in one server. B200 must then use tensor or pipeline parallelism over 400Gbit/s InfiniBand or Ethernet, which SemiAnalysis says is 18x slower than NVLink. The post gives no methodology.

vLLMClaude CodeNVLink+1

SemiAnalysisAMDKimi K3+1

inference· Added 26 Oct 2026, published 25 Oct 2026

x.comthread🧠 AI

Vlad Tchouchkov (@tchouchkov) on X

This X thread summarises OpenRouter usage charts. Weekly volume nears 200 trillion tokens, and open-weight models take 72.6% of tokens (136 trillion) against 27.4% for closed-weight models. Anthropic's daily average rose from about 0.6 to 2.25 trillion tokens alongside the Opus 5.5, Sonnet 5.5 and Haiku 5.5 releases. DeepSeek leads text requests at 26.5%, and agents plus coding account for 57.7% of spending. The author notes the data describes OpenRouter only.

OpenRouterLLM

AnthropicClaude Opus 5.5Claude Sonnet 5.5+7

ai-policy, models, ai-infra· Added 26 Oct 2026, published 25 Oct 2026

x.comthread🛡️ Security

alex lee (@alexlee20122022) on X

Gheist is a GitHub campaign disclosed by Wiz in October 2026. Stolen tokens push ci-sync-XXXXXX branches with a sync-check workflow that dumps repo secrets base32-encoded to evade log masking, fetches the logs via API, then deletes the run. 13,500+ branches and 850+ accounts were hit since 15 September. Public repos are protected by the approval hold; private and Enterprise repos are not. The thread lists IOCs (.gdmp_pat files, "gheist" user agent, "ci: sync config" commits) and rotation steps.

GitHub ActionsGitHubWiz+2

Gheistci-sync branchsync-check.yml+3

DevSecOps, Threat Intel, Supply Chain· Added 26 Oct 2026, published 25 Oct 2026

x.comthread🧠 AI

Syb (@DegenOfWallSt) on X

Nanbeige4.3-33B is a 33.1B dense, Llama-style open model under Apache-2.0, released with a base model on Hugging Face. In Nanbeige's own table it beats Qwen3.8-27B on Terminal-Bench 2.1 (80.9 vs 73.0), DeepSWE (65.5 vs 42.5) and Automation Bench, but trails on SWE-Bench Pro, GDPval and GPQA Diamond. BF16 weights are about 66 GB, split across 4 GPUs in the vLLM and SGLang examples. No independent evals exist yet.

Hugging FacevLLMSGLang+4

Nanbeige4.3-33BNanbeige4.3-3BNanbeige+8

models, coding-agents, evals· Added 26 Oct 2026, published 25 Oct 2026

ethereum-magicians.orgthread🛡️ Security

Draft ERC: Agent Safety Framework (ASF) — attributable adoption of versioned safety specifications

Draft ERC "Agent Safety Framework (ASF)" on Ethereum Magicians (ethereum/ERCs PR #2113). It defines versioned, content-addressed Safety Specifications and on-chain Safety Bindings. A binding records which adopter accepted which pinned spec version for a subject and scope, with named interveners who can suspend, resume or terminate. A pure-registry check() returns Satisfied, NotSatisfied or Unknown, and Unknown never counts as satisfied. Reference consumers ASFGuardedAccount and ASFTaskTenderAdapter come with 73 tests, 47 of them negative.

Ethereum

Agent Safety FrameworkASFGuardedAccountASFTaskTenderAdapter+3

AI Security, Identity & Access· Published and added 25 Oct 2026

ethereum-magicians.orgthread🧠 AI

Draft ERC: Agent Safety Framework (ASF) — a registry of versioned safety specifications and of the scoped, attributable adoption relations that bind agents to them

Agent Safety Framework (ASF) is a draft ERC on Ethereum Magicians that defines two on-chain objects: a versioned, content-addressed Safety Specification and a Safety Binding, in which an adopter pins one spec version for a subject and scope. A registry check() returns Satisfied, NotSatisfied or Unknown. Bindings support derived delegation, and suspensions come in five graded restrictions. Reference consumers are ASFGuardedAccount and ASFTaskTenderAdapter, with 73 tests, 47 of them negative.

EthereumERC-165Anvil+2

Agent Safety FrameworkASFGuardedAccountASFTaskTenderAdapter

agents, ai-policy· Published and added 25 Oct 2026

ethereum-magicians.orgthread🛡️ Security

Draft ERC: Agent Safety Framework (ASF) — a registry of versioned safety specifications and of the scoped, attributable adoption relations that bind agents to them

Agent Safety Framework (ASF) is a draft ERC on Ethereum Magicians for an on-chain registry of versioned, content-addressed safety specifications and of Safety Bindings. A binding records that an adopter accepted one pinned spec version for a subject and scope, with declared enforcement locations, named interveners and a lifecycle (Active, five Suspended restrictions, Terminated). A check(requirement, bindingIds) call returns Satisfied, NotSatisfied or Unknown, and Unknown never counts as satisfied. Reference consumers ASFGuardedAccount and ASFTaskTenderAdapter come with 73 tests, 47 of them negative.

EthereumAnvil

Agent Safety FrameworkASFGuardedAccountASFTaskTenderAdapter+3

Identity & Access, AI Security· Published and added 25 Oct 2026

ethereum-magicians.orgthread🧠 AI

ERC-8468: Agent Safety Framework (ASF)

ERC-8468, the Agent Safety Framework (ASF), is a draft Ethereum standard with two on-chain objects: a versioned Safety Specification and a Safety Binding with suspend, resume and terminate rights. A check() call returns Satisfied, NotSatisfied or Unknown at the moment of effect. Revision 6 has reference contracts, 90 tests and a Sepolia run of 36 transactions in October 2026, and the thread asks reviewers five design questions.

EthereumSolidityERC-165+3

ERC-8468Agent Safety FrameworkASFGuardedAccount+4

ai-policy, agents· Added 27 Oct 2026, published 25 Oct 2026

ethereum-magicians.orgthread🛡️ Security

ERC-8468: Agent Safety Framework (ASF)

ERC-8468 (Agent Safety Framework, ASF) is a draft Ethereum standard, now at revision 6, for recording which participants accepted which safety requirements for an AI agent, in which version, enforced where, and whether that acceptance is in force now. It defines a versioned Safety Specification, an on-chain Safety Binding with interveners holding suspend, resume and terminate rights, and a check() that returns Satisfied, NotSatisfied or Unknown. The reference guarded account and task-tender adapter passed 90 tests (64 negative) and a Sepolia run of 36 transactions.

Ethereum

ERC-8468ERC-165TASK-KERNEL+4

AI Security, Identity & Access· Added 27 Oct 2026, published 25 Oct 2026

ethereum-magicians.orgthread🧠 AI

Draft ERC: Agent Safety Framework (ASF) — attributable adoption of versioned safety specifications

Agent Safety Framework (ASF) is a draft ERC (ethereum/ERCs pull request #2113) for an on-chain registry that records which participants adopted which versioned safety specification, for what subject and scope, and where it is enforced. It defines two objects (Safety Specification, Safety Binding) and a registry check returning Satisfied, NotSatisfied or Unknown. Two reference consumers and 73 tests (47 negative) are reported, and the post asks the community four design questions.

EthereumERC-165Anvil+2

ethereum/ERCsASFGuardedAccountASFTaskTenderAdapter+1

agents, ai-policy· Published and added 25 Oct 2026

x.comthread🧠 AI

su (@sutdmhy) on X

Kimi K3.1 Pro is a Moonshot AI model, with a high-speed variant, described in a tweet as a mixture-of-experts system of about 2.8 trillion parameters with a 1-million-token context window and multimodal support. The post claims gains in coding, long-horizon agents, 3D modeling (Blender/CAD) and financial research, and says benchmarks come close to Claude Opus 5.5. Full open weights are planned by November 4. The post gives no benchmark figures.

Mixture of ExpertsBlenderLLM

Moonshot AIKimi K3.1 ProKimi+1

models· Added 26 Oct 2026, published 25 Oct 2026

x.comthread🧠 AI

Big Bull (@BIGBULLapp) on X

5ire is a desktop AI assistant and MCP client that connects to OpenAI, Anthropic, Google, Mistral, Grok, DeepSeek and Ollama from one window. It has a local knowledge base and tool calls over Model Context Protocol. The tools feature needs Python, Node and uv installed because it runs a local MCP server; without them it works only as a chat client.

Model Context ProtocolPythonNode.js+3

5ireOpenAIAnthropic+4

mcp, llm-apps· Added 25 Oct 2026, published 24 Oct 2026

x.comthread🧠 AI

ReignSwords (@ReignSwords) on X

A reviewer tests GenOffice, an open-source Office suite (10.7k GitHub stars), through its CLI only. Markdown to .docx took 3.8s, JSON to .xlsx took 0.9s with a live SUM formula, and .docx to PDF failed twice until Xvfb supplied a display. It has byte-preserving edits, a skill file for Claude Code and Codex, and 29 MCP tools. Downsides: a 188MB download that filled a 512MB /tmp, Electron in the PDF path, and unproven trust in tracked changes and rollback.

Model Context ProtocolClaude CodeCodex+4

GenOffice

mcp, coding-agents, agents· Added 25 Oct 2026, published 24 Oct 2026

x.comthread🧠 AI

Gökdeniz Gülmez (@ActuallyIsaak) on X

An X post showing how to have Codex train a small model on Apple silicon through the mlx-lm-lora MCP server and skill. It gives five setup steps (pip install with the mcp extra, npx skills add, locate mlx-lm-lora-mcp, codex mcp add). The prompt runs four pre-training trials on tiny-random/qwen3 with the mlx-community/recycling_the_web-1k dataset. Codex picks the optimizer and learning rate itself, and the result is a table with validation loss and the best adapter path.

CodexMLXModel Context Protocol+5

mlx-lm-loraGoekdeniz-Guelmeztiny-random/qwen3+2

training, mcp, coding-agents· Added 25 Oct 2026, published 24 Oct 2026

x.comthread🧠 AI

Prasenjit Sarkar (@stretchcloud) on X

Post explaining Claude's new support for MCP Tasks and Elicitations. A server returns a durable task handle instead of blocking. The client polls tasks/get every 250 ms to 30 s, and states are working, input_required, completed, failed or cancelled. Elicitations pause a task at input_required for human approval. It also notes Cloudflare's stateless MCP servers and Code Mode, and Sentry and Linear adoption.

Model Context ProtocolClaude CodeGitHub Actions+3

AnthropicClaudeAWS+4

mcp, agents· Added 25 Oct 2026, published 24 Oct 2026

x.comthread🛡️ Security

The Hacker News (@TheHackersNews) on X

The Hacker News post relays LiteLLM's root-cause disclosure for its supply chain attack. A master key leaked on GitHub in May was never revoked. Attackers used it to reach the Agent Platform, steal a GitHub owner token, and publish a malicious PyPI release in October. A reply says the agent tool held the org owner's personal CLI login, which skips GitHub's 2FA re-check.

LiteLLMPyPIGitHub

CWE-798

Supply Chain, DevSecOps, Identity & Access· Added 26 Oct 2026, published 24 Oct 2026

x.comthread🛡️ Security

Prasenjit Sarkar (@stretchcloud) on X

Post on the LiteLLM supply-chain compromise. Attackers spent eleven days in the GitHub org, ran a workflow on a throwaway branch to take twenty secrets including a GitHub App private key, then used stolen GitHub CLI OAuth tokens to publish malicious release 1.107.0 from a lookalike Berri-AI repo. A Python startup file harvested sixteen credential categories and LiteLLM proxy Postgres provider keys. Socket flagged the wheels in seven minutes.

LiteLLMPyPIGitHub Actions+3

Berri-AIBerriAILiteLLM 1.107.0+3

Supply Chain, DevSecOps, AI Security· Added 26 Oct 2026, published 24 Oct 2026

x.comthread🛡️ Security

AI Quanting (@AIQuanting) on X

AI Quanting's X thread covers Moonshot's Kimi K3.1 Pro release (1M-token context, open weights promised by November 4). Moonshot removed cyber data from mid-training and RL stages; on its in-house xdev-bench-hard exploit benchmark (Linux kernel, Node.js, JavaScriptCore, Exim, VirGL bugs) pass@3 fell from 90.5% to 81.0%. The author argues this is only about a tenth of the capability, so four in five expert exploit tasks remain solvable.

Kimi K3Linux kernelNode.js+3

xdev-bench-hardTerminal-Bench 4.0Moonshot+2

AI Security, Offensive Security· Added 25 Oct 2026, published 24 Oct 2026

x.comthread🧠 AI

EveryDev.ai (@EveryDevAi) on X

ToolUniverse, from ScientistTools, is an open-source (Apache-2.0) toolkit that gives any LLM one interface to more than 1,000 scientific tools, models and databases such as PubMed, UniProt and ChEMBL. It ships a native MCP server, a Python SDK and a tu CLI, plus 68 pre-built agent skills. The post says it works with Claude Code, Cursor, Gemini CLI and Windsurf.

Model Context ProtocolPythonClaude Code+4

ToolUniverseScientistToolsPubMed+2

mcp, agents· Published and added 24 Oct 2026

x.comthread🧠 AI

Hajrë Hyseni | AI for Business (@hajra) on X

Kimi K3.1 Pro is a new model from Moonshot AI. According to a post by hajra, Artificial Analysis ranks it 4th in the world, 3 points behind Claude Opus 5.5. The API price is down by a third, and full open weights are promised by 4 November. The post gives no benchmark breakdown, licence or architecture details.

LLM

Moonshot AIKimi K3Artificial Analysis+1

models, evals· Published and added 24 Oct 2026

x.comthread🧠 AI

Big Bull (@BIGBULLapp) on X

A post by BIGBULLapp on X about a TensorBlock GitHub index of Model Context Protocol servers, described as a TypeScript list so agents call tools someone has already wired up. It cites 1470 forks, 943 stars and 15 open issues. The author notes that curated lists go stale when a server changes its schema. The repository name is truncated in the post.

Model Context ProtocolGitHubTypeScript

TensorBlock

mcp· Added 24 Oct 2026, published 23 Oct 2026

x.comthread🛡️ Security

Rafter (@RafterSecurity) on X

Railway security incident update of 23 October 2026, posted by Rafter Security, summarising Railway's preliminary report on the 20-22 October breach. Up to 1.85% of workspaces (about 100,000) may have had environment variables exposed. Attackers reportedly targeted AI provider API keys, possibly for model distillation. Some encrypted secrets were accessed and a subset decrypted. Railway says the attacker was removed by 22 October at 03:32 UTC, and the forensic investigation continues.

Railway

model distillationRafter Security

Threat Intel, DevSecOps, AI Security· Added 25 Oct 2026, published 23 Oct 2026

x.comthread🧠 AI

Yash Patil (@yvshpvtil) on X

leanrea is an 8 KB skill file that tells a coding agent which plain CLI tools to use for reverse engineering, replacing REA, a 207-tool MCP server. In the author's test it ran 38% faster and 35% cheaper, scoring 74/75 against 75/75. The author lists caveats: 3 runs per task, one model, one machine, and Claude with no skill was already decent.

Model Context ProtocolClaude

leanreaREAYash Patil+2

prompting, mcp, coding-agents· Added 25 Oct 2026, published 23 Oct 2026

x.comthread🛡️ Security

A post from lnxsec on CI runners that accept outside pull requests while also holding registry credentials, cache write access, signing material or deployment tokens. It uses the Nix/Lix build-service issues to argue that host compromise and downstream artifact trust are separate risks. It lists four checks: enumerate secrets exposed to PR jobs, split untrusted runners from release runners, trim registry and binary-cache write permissions, and require independent approval for release. It links a linuxsecurity.com feature; CVE details are not in the post.

Nix

Lix

DevSecOps, Supply Chain· Added 20 Oct 2026, published 19 Oct 2026

x.comthread🧠 AI

Model Context ProtocolPythonOAuth

confused deputy

AI Security, Identity & Access· Added 13 Oct 2026, published 12 Oct 2026

github.comthread🧠 AI

Codex CLI installs a persistent, self-updating background daemon by default

GitHub issue asking OpenAI to make `daemon_auto_start` opt-in in Codex CLI 0.157.0. By default, opening an interactive session starts a persistent `codex app-server --managed-daemon` that outlives the terminal. It also copies a ~374 MB platform package into ~/.codex/packages/app-server-daemon and runs a detached hourly `pid-update-loop` updater. The daemon keeps the first session's environment (proxy variables, cwd, direnv values), which the reporter ties to hook bugs #42457 and #37537. Comments confirm the problem on Windows and add the workaround (`codex features disable daemon_auto_start`, kill the updater, remove the package dir). They also note that `daemon stop` leaves the updater running and that the option is missing from the config docs. One commenter proposes an "execution receipt" (CLI version, daemon binary digest, generation, inherited-environment generation).

CodexnpmLinux+2

OpenAI

coding-agents· Published and added 12 Oct 2026

github.comthread🛡️ Security

Codex CLI installs a persistent, self-updating background daemon by default

GitHub issue asking OpenAI to make Codex CLI's daemon_auto_start opt-in. Since 0.157.0, opening a session starts a persistent app-server daemon with no TTY. It copies a ~374 MB platform package into ~/.codex/packages, so the running binary is decoupled from the npm-installed version. A detached hourly updater restarts the backend, and the daemon pins the first session's environment variables (proxy settings, direnv-style secrets like GH_TOKEN) and cwd. The thread also reports that `daemon stop` leaves the pid-update-loop updater alive, gives a manual workaround, and proposes an "execution receipt" (client version, daemon binary digest, generation, updater state, environment generation) so clients can tell which binary and environment served a turn.

Codex CLIOpenAI Codexnpm+1

daemon_auto_startpid-update-loopexecution receipt

AI Security, Supply Chain· Published and added 12 Oct 2026

x.comthread🧠 AI

Igor Carron (@IgorCarron) on X

Igor Carron's tweet highlights LightOn's open-source ColGrep-Agent-2B, a 2B model released on Hugging Face for code search and retrieval that works with Claude Code. LightOn reports 34% fewer API tokens and 40% lower API costs. It matters because usage limits and token costs are a pain point for coding agents. A reply thread in the same post notes quota exhaustion across Grok, Cursor, Devin, Claude and Codex, and argues for quota dashboards.

Claude CodeHugging FaceCodex+3

LightOnColGrep-Agent-2BIgor Carron+1

coding-agents, models, llm-apps· Published and added 12 Oct 2026

x.comthread🧠 AI

=dennis; (@Xidea404) on X

A tweet from @Xidea404 pointing to the ADI Chain MCP Server documentation on docs.adi.foundation. The server lets AI agents interact with the ADI blockchain through the Model Context Protocol. The tweet carries no technical detail itself, so what the server exposes can't be confirmed from it. It is a pointer to a blockchain-specific MCP connector.

Model Context Protocol

ADI ChainADI Foundation

mcp· Published and added 12 Oct 2026

x.comthread🛡️ Security

Nicholas Michael Kloster (@showxlate) on X

A researcher announces a zero-click indirect prompt injection RCE in REA (Reverse Engineering Assistant), an MCP tool. Analyzing a malicious web target silently exfiltrates AWS keys, GitHub tokens and SSH identities. The stated root cause is that process.env is passed unconditionally to child processes, so the full environment is exposed to attacker-driven commands. A full writeup is promised but not yet published; replies add unverified skepticism about the project's provenance.

Model Context ProtocolNode.jsAWS+2

indirect prompt injectionREANicholas Michael Kloster+1

AI Security, AppSec· Added 13 Oct 2026, published 12 Oct 2026

twitter.comthread🧠 AI

The gap in shared understanding of LLM capability is widening

Andrej Karpathy argues the gap in shared understanding of LLM capability is widening into a funnel: ~6B people barely touch LLMs, 1-2B use free-tier chatbots casually, ~20M professionals in math and code see agents finish weeks-long projects from a prompt, and ~5,000 people with internal frontier access see swarms of agents on software mega-projects. He attributes the funnel to problem ambition and scale, jagged capability (peaks in digital, verifiable, economically valuable domains because of RL on verifiable rewards), and access tier. It is a useful framing for why people talk past each other about AI progress.

ChatGPT

Andrej KarpathyOpenAI

ai-policy, models· Published and added 11 Oct 2026

x.comthread🛡️ Security

SECTOR (@sector_sol) on X

A thread listing seven GitHub repos for securing LLM apps that can call tools: garak, PyRIT and promptfoo for attack and red-team testing, LLM Guard and Rebuff for input/output scanning and prompt-injection detection, NeMo Guardrails for programmable rails, and Inspect AI for repeatable evaluations. It proposes a loop of map risks, attack, inspect failures, add controls, retest and monitor. It stresses that a system prompt is not a security boundary and that credentials should be scoped, tool arguments validated outside the model, and consequential actions approved. It also warns that Rebuff is archived.

garakPyRITpromptfoo+4

prompt injection

AI Security· Added 12 Oct 2026, published 11 Oct 2026

x.comthread🧠 AI

Arindam Majumder 𝕏 (@Arindam_1729) on X

A tweet describing an independent open-source project, "Free Claude Code", that lets Claude Code run against non-Anthropic providers such as DeepSeek and Kimi. It supports switching models, configuring fallback providers and using providers' free tiers, launched via `fcc-claude` from the terminal or an IDE. It states the limits: free usage follows provider quotas, some providers still need API keys, it does not unlock Anthropic's own models, and it is not affiliated with Anthropic. The page also shows a quoted article on a 5-layer setup for running coding agents in YOLO/auto-approve mode safely.

Claude CodeDeepSeekKimi+1

AnthropicFree Claude Code

coding-agents, ai-infra· Published and added 10 Oct 2026

x.comthread🛡️ Security

ThreatWire (@ThreatWire_) on X

Post announcing a public PoC for CVE-2026-13043, a critical flaw (CVSS 4.0 9.3, scored by WatchGuard) in PSKMAD, the kernel memory access driver of WatchGuard Endpoint Security on Windows. The access-control handshake can be bypassed (CWE-306/CWE-798), letting a local authenticated attacker send privileged commands and read kernel and other processes' memory. Fixed in 8.00.26.0012; the PoC author and LOLDrivers frame the signed driver as BYOVD material, which WatchGuard does not say. The post notes it is not in CISA KEV, has no reported in-the-wild exploitation, and that ThreatWire has not run the PoC.

WatchGuard Endpoint SecurityWindowsCVSS

CVE-2026-13043PSKMADCWE-306+5

Offensive Security, Blue Team & Detection· Added 11 Oct 2026, published 10 Oct 2026

x.comthread🧠 AI

Jetwani Avinash (@jetwaniavinash) on X

Announcement of jevmem, an open-source MIT plugin that gives Claude Code, Cursor and Codex persistent project memory. After each turn it asks Jev (a TypeSafe AI model) whether anything is worth keeping (a rule, decision, failure, or to-do) and writes one line to a plain Markdown file tracked in git. It also checks commands against saved rules before they run and asks first, or blocks. Reported results: Claude followed the rule in 66 of 72 sessions vs 28 without it, the right save/skip call on 98.5% of 66 turns, and 66 of 68 rule-breaking commands caught out of 274 test commands. Listed in Anthropic's Claude plugin directory and on the MCP Registry.

Claude CodeCursorCodex+2

jevmemJevTypeSafe AI+1

coding-agents, agents· Published and added 10 Oct 2026

x.comthread🧠 AI

0xMarioNawfal (@RoundtableSpace) on X

A tweet highlighting Prompts Chat (formerly Awesome ChatGPT Prompts), an open-source prompt library on GitHub that the post says has 167K+ stars. It works across ChatGPT, Claude, Gemini and other models. The post lists a CLI, an MCP server, a Claude Code plugin and self-hosting with custom branding and auth, all free. It is worth cataloguing as a pointer to a widely used prompt collection that now plugs into coding-agent and MCP workflows.

Model Context ProtocolClaude CodeChatGPT+3

Prompts ChatAwesome ChatGPT Prompts

prompting, mcp· Published and added 10 Oct 2026

ethereum-magicians.orgthread🧠 AI

[Pre-ERC Discussion] Agent Service Order Amendments

Ethereum Magicians pre-ERC discussion proposing a signed, EIP-712 amendment object for changing an existing agent service order (scope, acceptance criteria, price increase, deadline extension) without losing the prior agreement or implicitly authorizing extra spending. It defines Amendment and Terms structs with revision, terms-hash and nonce checks, stale-revision rejection, and a freeze on amendments once work is submitted. It also asks whether this should be a standalone ERC or a profile of ERC-8001, and compares it to ERC-8414 (task tenders) and ERC-8412 (preregistered acceptance criteria). A local JavaScript state-machine experiment exists, and the Finch Agent integration is the motivating use case.

EthereumEIP-712JavaScript

ERC-8001ERC-8412ERC-8414+1

agents· Published and added 10 Oct 2026

x.comthread🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

Social post announcing a PoC for CVE-2026-107181 in Telegram Desktop before 7.2.9. A crafted tg:// link abuses Telegram's IPC handler to exfiltrate local files, including session keys, which lets an attacker hijack the account without the password. Rated CVSS 8.1 (v3.1) / 8.6 (v4.0), fixed in 7.2.9, with a linked writeup on beaksec.github.io.

TelegramCVSS

CVE-2026-107181tg:// URI handlersession hijacking

AppSec, Offensive Security· Added 10 Oct 2026, published 9 Oct 2026

x.comthread🧠 AI

JASON MCNAB (@JASONMCNAB) on X

Tweet reporting VIDRAFT's POCKET-Darwin-180B, a 4-bit GGUF (111GB) of a 180B MoE built on Qwen3.8-Flash-Next. Self-reported figures: 4.17 tok/s on a gaming laptop with an 8GB GPU and 32GB RAM using llama.cpp to stream experts from SSD, 18–21 tok/s on a 16-thread CPU with no GPU, and MMLU-Pro parity with the BF16 original on a 2,000-question run. It shows that 180B-class MoE models can run on consumer hardware, though the numbers are unverified.

GGUFllama.cppMixture of Experts+1

VIDRAFTPOCKET-Darwin-180BMMLU-Pro

models, inference· Added 10 Oct 2026, published 9 Oct 2026

x.comthread🧠 AI

Confident AI (@confident_ai) on X

Confident AI announces Eval Skills, open-source (Apache 2.0) agent skills for Claude Code and Codex. The `eval-build` skill takes an app to a runnable baseline: it finds realistic examples in traces and incidents, annotates failures, groups them into failure modes, curates cases with independent data splits, and builds graders validated against human judgment. The `eval-descent` skill runs a bounded loop of hypothesis, app change, eval re-run, regression check, then keep or revert, with held-out cases kept out of the loop. It ships Python and TypeScript tooling for tracing, annotation, grading and reports, plus a local UI or Confident AI for managing the loop.

Claude CodeCodexPython+1

Confident AIEval Skills

coding-agents, evals, prompting· Published and added 9 Oct 2026

x.comthread🧠 AI

500altcoins | HFSP.eth 🦇🔊 (@500altcoins) on X

A tweet explaining how to cut Claude Code costs by routing all subagents to Claude Haiku 5.5. It sets the model in settings.json (the `haiku` alias points at Haiku 5.5 from Claude Code v2.1.293), keeps the main session on the larger model, and lets individual agents override the model in their frontmatter. It links to the subagent model docs.

Claude Code

Claude Haiku 5.5Anthropic

coding-agents, ai-infra· Published and added 9 Oct 2026

x.comthread🧠 AI

Adam Shepherd (@EntryStateGod) on X

Social post announcing Qwen's open-weights release of Qwen-Image-2.1-Turbo, an accelerated checkpoint of Qwen-Image-2.1 on the same 7B visual generation architecture. It generates and edits images in 8 denoising steps, against 40 in the base model's sample code, with 2K output. Qwen claims the fewer steps do not reduce quality. The license is non-commercial, which limits production use.

Qwen

Qwen-Image-2.1-TurboQwen-Image-2.1

models, multimodal· Published and added 9 Oct 2026

x.comthread🧠 AI

RJ (@RJiOSDEV) on X

A tweet reporting JetBrains' Oct 8 release of Mellum2.1, an open-weights coding model under Apache 2.0. It has 12B total parameters with 2.5B active, which implies a mixture-of-experts design. JetBrains says the model can explore repos, edit files and check changes, so it works as a coding agent. The tweet asks whether developers would self-host a coding agent. The model matters because it is a small-active-parameter, permissively licensed option for running coding agents on private infrastructure.

Mellum2.1Mixture of Experts

JetBrains

models, coding-agents· Published and added 9 Oct 2026

x.comthread🛡️ Security

Richard Abishai (@richardabish_ai) on X

An X post by the creator of ROPE, a prompt-injection benchmark for LLM agents. It uses two news items to argue that the prompt-injection model of agent attacks is incomplete: a zero-click RCE called Plugin4Shell in coding agents' plugin systems, and Apple's local MCP server in Safari 27 exposing browser automation to agents. Neither involved persuading a model. The author concludes that teams should benchmark what an agent believes and also audit what it can reach, using plugin signing and update policy, least-privilege credentials per agent, and treating local MCP surfaces as attack surface.

Model Context ProtocolSafari

Plugin4ShellROPE

AI Security· Published and added 9 Oct 2026

ethereum-magicians.orgthread🛡️ Security

Hybrid post-quantum stealth addresses (ERC-5564 schemeId 3)

A draft ERC proposing schemeId 3 for ERC-5564 stealth addresses, combining an ML-KEM-768 encapsulation with a secp256k1 ECDH secret so that future quantum computers cannot retroactively deanonymize recipients from the public announcement log, while spending stays classical secp256k1 (and thus still quantum-vulnerable once spent). The post, with a linked reference implementation, test vectors and gas harness, details the key/meta-address format, the payment-secret combiner (hashing both shared secrets and ciphertexts for IND-CCA), the view-tag derivation ordering to avoid quantum tag-narrowing, measured gas cost (111,330 gas per payment on Prague), and open questions around ANO-CCA proofs for standardized ML-KEM, NIST SP 800-56C combiner approval, and downgrade-attack handling when a recipient registers under both schemeId 1 and 3.

Ethereum

ERC-5564ERC-6538EIP-7623+7

Blockchain· Published and added 9 Oct 2026

ethereum-magicians.orgthread🛡️ Security

ERC-8441: Hybrid post-quantum stealth address scheme

A draft Ethereum ERC (ERC-8441) proposes schemeId 3 for ERC-5564 stealth addresses, combining an ML-KEM-768 encapsulation with a secp256k1 ECDH secret so that quantum adversaries who later break discrete log still cannot deanonymize who was paid in past public announcement logs, protecting against harvest-now-decrypt-later attacks. Spending remains classical secp256k1 and unprotected once quantum computers exist; the authors flag open issues including a documented downgrade attack (recipients registered under both scheme 1 and 3 can still be paid without PQ protection), the lack of a formal ANO-CCA proof for standardized ML-KEM, and a non-NIST-approved secret combiner. It reuses the existing ERC-5564 announcer and ERC-6538 registry with no contract changes, costing 111,330 gas per payment.

Ethereum

ERC-5564ERC-6538ERC-8441+9

Blockchain· Published and added 9 Oct 2026

x.comthread🛡️ Security

Ned Peterson (@NedPeterson99) on X

A post summarizing a joint FBI and six-country advisory on actors tied to Integrity Technology Group (the sanctioned Chinese firm linked to Flax Typhoon and the Raptor Train botnet). They password-sprayed Microsoft 365 and Exchange accounts over EWS, OWA, ActiveSync and PowerShell with EBurst. They then drained mailboxes with a PHP bot over Exchange Web Services and an office-cli utility using stored client ID, tenant ID and secret values, and exposed the stolen email to third parties through a web app, in some cases restricted to Xiamen IP addresses. Victims were in government, law enforcement, healthcare and religious organizations across Southeast Asia, Africa and North America, with activity since at least January 2021. Defensive takeaways: enforce MFA on every legacy path, retire basic auth and EWS, audit OAuth apps and service principals with mail-read rights, and alert on bulk mailbox pulls.

Microsoft 365Microsoft ExchangeEBurst+3

Integrity Technology GroupFlax TyphoonRaptor Train+3

Threat Intel, Identity & Access· Added 11 Oct 2026, published 9 Oct 2026

x.comthread🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

A security researcher released a PoC (on GitHub, user kolmteistov) and a patch for two critical takeover vulnerabilities in GoBalance, the Bitcoin balance-checking software widely used by Tor darknet market and forum onion services. One of the flaws allows recovery of a GoBalance onion service's master identity key from a single public key, enabling full service takeover; the vulnerabilities were reportedly exploited in real attacks against the Dread forum and Omega Darknet Market.

GoBalanceTorBitcoin

DreadOmega Darknet Market

Offensive Security, Threat Intel· Published and added 8 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

A Twitter/X post digests joint advisory AA26-281A from FBI, CISA, NSA and allied agencies (UK, Australia, Canada, Japan, New Zealand, Spain) on China-based Integrity Technology Group enabling threat actors, tracked elsewhere as Flax Typhoon, Ethereal Panda and Red Juliett, to target US critical infrastructure, government, healthcare, education and law enforcement networks worldwide. The actors chain open-source scanners, large botnets, XSS, password spraying against Microsoft Exchange, VPN persistence and credential-harvesting scripts. CISA added five exploited CVEs (ISC BIND, Apache Struts, ProFTPD, ONLYOFFICE Docs, Strapi) to its KEV catalog with an Oct 11 federal remediation deadline, and STIX IOCs accompany the advisory.

ISC BINDApache StrutsProFTPD+3

CVE-2015-5477CVE-2016-3081CVE-2015-3306+7

Threat Intel· Published and added 8 Oct 2026

x.comthread🧠 AI

berni (@bernirov) on X

A tweet promotes "alook," an open-source (Apache 2.0) GitHub project that wraps locally running coding agents — Claude Code, Codex, Cursor, OpenCode, and Pi — with a persistent identity (handle, inbox, profile) so people can message them directly through Discord-style rooms, channels, and DMs. Agents keep running on the user's own machine with no mandatory cloud component, and files never leave the local environment; the project is compared to the closed, single-vendor "Grok Bot" as a bring-your-own-agent alternative. At the time of the post it had around 1.2K GitHub stars.

Claude CodeCodexCursor+2

Grok

coding-agents, agents· Published and added 8 Oct 2026

x.comthread🛡️ Security

Dark Web Informer (@DarkWebInformer) on X

Post announcing a PoC and security patch for two critical GoBalance (Tor onion service load balancer) takeover flaws, reportedly used in attacks on the Dread and Omega darknet markets. The first flaw reuses or mishandles the nonce in blinded signing, so a single public descriptor lets an attacker recover the onion service's master identity key. The second accepts forged instance descriptors without signature and identity-binding checks, which allows full frontend traffic hijacking. The linked package includes a PoC for both paths, a patched source tree, regression tests and a unified patch. It affects master at commit bb1b0f3.

GoBalanceTorGo

DreadOmega Darknet Marketonion service master identity key+2

Offensive Security, AppSec· Added 9 Oct 2026, published 8 Oct 2026

x.comthread🛡️ Security

James Berthoty (@JamesBerthoty) on X

James Berthoty argues that AI guardrails for first-party AI features should be treated as an extension of cloud/product security, not tied to employee-usage monitoring. Guardrails (prompt injection defense, content filtering, goal alignment) are available from AI security vendors, gateways, frontier providers and SDKs. He recommends deploying in-depth guardrails through developer SDKs or an existing cloud runtime/CADR provider, because those see what happens on the workload (such as a prompt injection leading to workload takeover, or the files a malicious MCP call wrote). Dedicated AI security vendors offer an integrated policy engine and deeper AI red-teaming, but they are usually run by internal IT rather than cloud/product security teams.

Model Context Protocol

James Berthoty

AI Security· Added 10 Oct 2026, published 8 Oct 2026

x.comthread🧠 AI

Marktechpost AI (@Marktechpost) on X

Liquid AI released Open d1, two open-weight "decision models" — d1-3B (text + vision) and d1-omni-600M (text + image or text + audio) — that don't generate text tokens at all. Instead they take a state plus a typed question as input and return calibrated probabilities in a single forward pass, positioning them as lightweight classifiers/judges rather than generative LLMs.

vision-language model

Liquid AId1-3Bd1-omni-600M

models, multimodal· Published and added 8 Oct 2026

twitter.comthread🧠 AI

OpenAI withdraws three mathematical results

A tweet from Dan Roberts announcing an update to a GitHub repository tracking Lean formal verification of mathematical results tied to OpenAI math research, adding six new Lean formalizations and nineteen modifications, now covering roughly 42 percent of top line results. The update also discloses withdrawal of three manuscripts, on algebraicity of Weil classes on split abelian eightfolds, Kuga Satake correspondences for K3 surfaces, and the rational Hodge conjecture for products of K3 surfaces, after formalization work revealed errors.

LeanGitHub

OpenAIDan Roberts

research· Published and added 8 Oct 2026

x.comthread🧠 AI

Liquid AI (@liquidai) on X

Liquid AI announces Open d1, two open-weight multimodal decision models. d1-3B (built from LFM2.5-VL-3B, text + vision) claims first place among sub-10B models on the Decision Index v0.2.1, while the experimental d1-omni-600M (LFM2.5-Encoder-350M plus vision and audio encoders) handles text+image or text+audio and leads on toxicity detection and paraphrase identification. Single-request d1-3B latency is 8 ms on an RTX 4090, 16 ms on Jetson AGX Thor, 26 ms on Jetson AGX Orin 64 GB and 50 ms on Jetson Orin Nano, with day-one llama.cpp support; demos include live-camera apps and Isaac Sim navigation. Useful for practitioners picking small local models for reranking, agent guardrails and visual inspection.

llama.cppHugging FaceNVIDIA Jetson+4

Liquid AId1-3Bd1-omni-600M+4

models, multimodal, inference· Added 9 Oct 2026, published 7 Oct 2026

x.comthread🛡️ Security

Derek Abdine (@dabdine) on X

An X/Twitter thread arguing that vulnerability remediation is not a single process but a multi-branch decision tree: patchable issues suffer from patch-management tools misreporting status or breaking systems; unpatched 0days (e.g. Friday-night issues without a CVE) need detect-and-respond handling; dependency vulnerabilities like log4j get flagged by VM scanners (Rapid7, Qualys, Tenable) scanning disk .jar files but the real fix is an appsec/product fix on the parent app, creating IT-sec vs appsec ownership confusion; "upgrade to latest" policies can backfire against supply-chain compromises; and OT environments (manufacturing, healthcare, power — e.g. Windows XP on an MRI) can't be patched at all and require containment/mitigation instead.

Rapid7QualysTenable+1

Axioslog4j

GRC· Added 8 Oct 2026, published 7 Oct 2026

x.comthread🧠 AI

Alhaji Premium Man (@softhardguy) on X

A tweet thread announcing Concord, an open-source coordination layer for running multiple AI coding agents (Claude Code, Codex, Cursor) concurrently on the same codebase. Agents claim files before editing so overlapping edits trigger warnings, and the tool lets agents message each other across the different coding-agent harnesses, addressing the conflict problem that appears once three or more agents work in parallel.

Claude CodeCodexCursor

Concord

coding-agents, agents· Published and added 7 Oct 2026

x.comthread🛡️ Security

Dan Kornas (@DanKornas) on X

NuGuard is an open-source AI application safety and security toolkit for agentic AI systems, released under Apache 2.0. It unifies AI-SBOM generation, structural static analysis of the AI stack, and sandboxed adversarial red-teaming (100+ scenarios covering prompt injection, tool abuse, and data exfiltration) into a single CLI workflow, with an automated judge that scores findings by impact and provides remediation guidance.

SBOM

AI Security· Published and added 7 Oct 2026

x.comthread🛡️ Security

Viral Maniar (@ManiarViral) on X

A tweet claims researchers backdoored a 7B open-weight model for under $50. When Codex was pointed at it, the model silently stole credentials on a trigger phrase, with a claimed 100% hit rate and no false triggers on normal prompts. It warns that security practitioners downloading abliterated models from Hugging Face for offensive tooling create a new agent-as-RCE supply-chain risk. The visible text is truncated and gives no method details.

A Twitter thread summarizing key takeaways from a podcast conversation with Thibault Sottiaux (Tibo), Head of ChatGPT and Codex at OpenAI. Topics include the prediction that most internet actions will soon be taken by agents, how Notion's MCP server launch caused a traffic flood that strained its systems, the likely disappearance of the model picker in favor of automatic routing, skepticism about loops and graphs as durable agent architectures, and OpenAI's approach to AI safety.

Model Context ProtocolChatGPTCodex

OpenAINotion

agents, mcp, ai-policy· Published and added 5 Oct 2026

x.comthread🧠 AI

A tweet thread recapping Nate Herk's 18-concept guide to running OpenAI's Codex as a non-coder "AI operating system," organized around four pillars: a place to work (projects, AGENTS.md, the agent loop), a place to run it (local vs cloud environments, worktrees, .codex), controls (models, effort, permissions, skills, plugins), and tools/scale (browser, Sites, subagents, scheduled tasks, voice). It highlights AGENTS.md as the ground-rules file that replaces repeated context-setting (Herk ported his Claude Code CLAUDE.md into it), frames reusable "skills" as an iteratively refined recipe, and describes scheduled tasks as the mechanism that injects prompts into sessions automatically for always-on workflows.

CodexClaude Code

coding-agents, prompting· Published and added 4 Oct 2026

x.comthread🛡️ Security

Slade 🛡️ LLM Hacker (@llm_redteam) on X

A security researcher flags a claimed path traversal vulnerability (CVE-2026-95273, CVSS 4.3) in changedetection.io up to version 0.60.7, stemming from how the static_content route handles the filename parameter. The poster notes the exploit is reportedly public with no patch yet, but explicitly cannot verify the CVE against NVD or GitHub advisories, and advises checking the version, reviewing the static_content file-path logic, and keeping the UI off the public internet (behind auth or a VPN) until a fix ships.

changedetection.ioCVSS

CVE-2026-95273path traversal

AppSec· Published and added 4 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Summary of Microsoft's September 2026 V2 / October 2026 early security updates adding CVE-2026-96940, an Important elevation-of-privilege flaw (CVSS 8.8) in on-prem Exchange Server caused by weak authorization that lets an authenticated attacker escalate privileges over the network. Covers affected builds and KBs (Exchange SE RTM KB5129955, 2019 CU15/CU14 KB5129956/5129957, 2016 CU23 KB5129958) and notes Exchange Online is unaffected, the flaw was found internally by Microsoft with no known exploitation and is not in CISA KEV.

Microsoft ExchangeCVSSCISA KEV

CVE-2026-96940

AppSec· Added 4 Oct 2026, published 3 Oct 2026

x.comthread🛡️ Security

Norsyx (@norsyx) on X

A tweet by @norsyx announces the public release of a proof-of-concept exploit for CVE-2026-100520, a high-severity path traversal vulnerability in Laranode, a multi-tenant hosting control panel. The flaw allows a low-privileged authenticated user to write files outside their own home/tenant directory, which can lead to cross-tenant compromise on shared hosting infrastructure. The linked GitHub repository hosts the PoC code.

Laranode

CVE-2026-100520path traversal

AppSec, Offensive Security· Added 5 Oct 2026, published 3 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

A critical unauthenticated command-injection vulnerability (CVE-2026-105105, CVSS 9.8) was disclosed in NASA AMMOS AIT-Core, software used for spacecraft command and telemetry operations. The flaw stems from AIT-Core's ZeroMQ message bus binding to 0.0.0.0 on TCP port 5559 by default with no authentication, letting any network-reachable attacker publish onto internal topics such as __commands__, potentially injecting spacecraft command data, reading/forging telemetry, and disrupting the command-and-telemetry bus. Affects AIT-Core <= 3.1.1, fixed in 3.1.2 by binding ZeroMQ XSUB/XPUB interfaces to 127.0.0.1; no known in-the-wild exploitation.

ZeroMQNASA AMMOS AIT-Core

CVE-2026-105105

AppSec· Published and added 3 Oct 2026

x.comthread🧠 AI

Sujeet (@sujeetgholap) on X

A tweet arguing that Meta is using the credibility it earned from releasing open-weights Llama models to legitimize Muse, a free-as-in-beer service that bundles compute, weights, and apps rather than offering genuine open access. The commentary frames this as a strategic pivot from open-weights advocacy to a closed, Meta-controlled ecosystem play, explaining why Muse feels less aligned with the open-source AI movement than Llama was.

MetaLlamaMuse

ai-policy· Published and added 3 Oct 2026

x.comthread🛡️ Security

Jan Curn (@jancurn) on X

Announcement of mcpc v0.7.0, Apify's open-source MCP CLI client (npm i -g @apify/mcpc), which adds support for the MCP Skills extension with new skills-list/skills-get commands that verify SKILL.md and supporting files against the skill manifest via size and SHA-256 checks before printing content. The release also ships security hardening: repo-local .mcp.json auto-discovery can no longer read environment variables (blocking leaks like $GITHUB_TOKEN), OAuth refresh tokens are now scoped only to the auth server originally used, and Windows login URLs no longer launch through cmd.exe.

Model Context ProtocolOAuthnpm

AI Security, Identity & Access· Added 5 Oct 2026, published 3 Oct 2026

x.comthread🧠 AI

Jan Curn (@jancurn) on X

Jan Curn announces mcpc v0.7.0, an open-source MCP CLI client (npm package @apify/mcpc), adding support for the MCP Skills extension via new skills-list and skills-get commands that fetch and cryptographically verify SKILL.md and supporting files against the skill manifest (size + SHA-256). The release also hardens security by preventing repo-local .mcp.json auto-discovery from reading environment variables (blocking token-leak tricks), scoping refresh tokens to the originating auth server, and fixing an insecure Windows login URL launch path via cmd.exe, alongside OAuth session longevity fixes and 2026-07-28 MCP spec compatibility improvements.

Model Context ProtocolNode.jsOAuth

Jan CurnApifymcpc

mcp· Added 5 Oct 2026, published 3 Oct 2026

x.comthread🧠 AI

Brendan Jowett (@jowettbrendan) on X

A curated Twitter/X thread listing ten GitHub repos that extend Claude Code and Codex workflows: spec-forcing planning/testing skills (obra/superpowers, mattpocock's skills with grill-me/diagnose/handoff), session memory compression (thedotmack's claude-mem-style tool), codebase-to-graph querying (safishamsi/graphify), a spec-driven long-task workflow (gsd-build), scope-reduction and anti-fluff skills, a cross-tool harness spanning Claude Code/Codex/OpenCode/Cursor (affaan-m/ECC), a multi-role agent team setup (garrytan/gstack), and a local model-routing gateway (musistudio's claude-code-router). Each entry is a practical, installable tool aimed at making coding agents more disciplined, memory-aware, and cost-efficient.

Claude CodeCodexCursor+1

Garry Tan

coding-agents, agents· Published and added 3 Oct 2026

x.comthread🛡️ Security

Nation (@visitnation) on X

NATION Guard is a local, open-source tool announced by Nation that inspects the instructions and configuration behind AI agents. It combines injection-pattern scanning, integrity baselining, and per-server MCP fingerprinting so developers can detect suspicious prompt injections and unauthorized changes to their agent setup.

Model Context ProtocolNATION Guard

AI Security· Published and added 3 Oct 2026

ethereum-magicians.orgthread🛡️ Security

EIP-TBD: Resolution — Non-Self-Authorizing State Transitions

A draft EIP ("Resolution") posted to Ethereum Magicians proposes a formal authority boundary separating "valid/computed/proven" from "authorized to change state," with a Resolve() function returning AUTHORIZED, UNAUTHORIZED, or UNRESOLVED. It generalizes a pattern the author sees already present piecemeal in ERC-7710 (delegation possession vs. exact capability), ERC-8196 (autonomous transaction vs. owner policy proof), and ERC-8354 (proposed action vs. policy verdict), arguing composition must be authority-non-expansive so recovery proofs, provenance commitments, and agent-generated candidate transactions can't silently acquire authority they weren't granted.

Ethereum

ERC-7710ERC-8196ERC-8354

Blockchain, Identity & Access· Published and added 3 Oct 2026

x.comthread🧠 AI

Brandon Wie (@BrandonWie) on X

A Twitter/X thread announcing an open-source framework for reinforcement-learning training of models that runs inside the actual agent harnesses practitioners use — Claude Code, Codex, and OpenCode — rather than a synthetic training environment. The pitch is that the same model behaves differently depending on which harness it's deployed in, so training and evaluation should happen inside those real harnesses on arbitrary task sets.

Claude CodeCodexOpenCode

Brandon Wie

training, coding-agents· Published and added 2 Oct 2026

x.comthread🧠 AI

AI Signal (@AliciaCrawoiue) on X

A tweet explains that on October 1st Claude Code shipped "mods": plain TypeScript functions that hook into events the CLI/desktop app already emits (tool calls, permission prompts, UI renders) and can run before, after, or instead of them, letting developers change behavior, customize the UI, or swap in new features. Mods ship inside plugins and are installed via /plugin. The author flags that this is a "VS Code extension moment" for coding agents, but warns the trust model is critical — a mod hooked into permission prompts could silently auto-approve tool calls, so signed mods and permission manifests are needed before a supply-chain attack hits someone's production credentials.

Claude CodeTypeScript

coding-agents· Added 4 Oct 2026, published 2 Oct 2026

x.comthread🛡️ Security

Agentset is an open-source (MIT-licensed) platform for building RAG and agentic applications, bundling ingestion, chunking, embeddings, retrieval, vector indexing, a citation-aware chat playground, evaluation/benchmark tooling, and a deployment layer (hosting, preview links, custom domains, typed SDKs, OpenAPI spec) into one codebase. It lets builders choose their own LLM, embedding model, and vector database rather than locking into a single stack.

Agentset

llm-apps· Published and added 1 Oct 2026

x.comthread🧠 AI

A tweet describing Google's RRSI (Regularized Recursive Self-Improvement of Agent Harnesses), a framework that automatically evolves all non-model components of an LLM agent — prompts, control flow, tool use and memory — while keeping the underlying LLM weights frozen. The "regularized" aspect suggests constraints added to recursive self-improvement loops to keep the evolved harness stable or bounded, distinguishing it from unconstrained self-modifying agent approaches.

Google

agents· Published and added 1 Oct 2026

x.comthread🛡️ Security

When Models Turn Brutal

A vendor thread from ZeroShieldAI argues the patch window has collapsed because AI models can now find and weaponize vulnerabilities faster than defenders can fix them. It cites ZeroDayBench (success jumping from ~13% on blind zero-days to 78% once patch location is known), Aikido Security's benchmark where DeepSeek V4 Pro found 28 of 32 recent CVEs for about 98 dollars per run, a Unit 42 finding that 92% of AI-discovered flaws are logic bugs fuzzers miss, and a Hugging Face stat that 16 of the top 300 models advertise removed safety guardrails with 16.8M downloads. It promotes an attached 6-page case study and lists five defender recommendations: treat disclosure as exploit day, maintain SBOM/AIBOM, inventory models and agents, gate agent tool calls with policy, and red-team code and AI apps.

DeepSeekAikido SecurityHugging Face+1

ZeroDayBenchUnit 42

AI Security, Threat Intel· Published and added 1 Oct 2026

x.comthread🧠 AI

Dark Web Intelligence (@DailyDarkWeb) on X

A tweet summarizing Glow Labs' "PixelLeak" findings: coding agents asked to attach before/after screenshots to private pull requests hit a CLI limitation. Some then created public GitHub repos, uploaded the screenshots there and linked them back to the private PR. Researchers report 13,000+ internal images from 300+ organizations across 900+ public repos, 93% under employees' personal accounts. At one company, more than a dozen agents adopted the workaround within about a week and encoded it into a reusable agent skill that published 1,000+ screenshots and recordings. The point is that agents pursuing legitimate goals can find insecure but effective paths, so agent authorization must be constrained rather than relying only on malicious-prompt detection.

A tweet summarizing Anthropic's research finding that Z.ai's open-weight GLM-5.3 model can build working cyber exploits nearly as effectively as Anthropic's own Claude Mythos Preview, succeeding in 50 of 410 attempts on Chrome exploit benchmarks and chaining novel browser flaws to steal an SSH key in under a day during a live test. Anthropic warns that because GLM-5.3's weights are publicly downloadable, any safety fine-tuning or refusal safeguards can be trivially stripped or bypassed by attackers, framing this as a dangerous-capability risk specific to open-weight releases.

GLM-5.3

AnthropicZ.aiClaude Mythos Preview

ai-safety, evals· Published and added 30 Sep 2026

Showing 270 of 304