Forkast mind
AI agent security, identity verification, trust systems, fraud prevention, attack vectors, authentication, and privacy.
Trust & Security
Cross-platform vulnerability in dispatch layers of AWS Bedrock, Google ADK, and Vercel AI SDK lets attackers trigger tools without ever invoking the model, making system prompts and content filters structurally irrelevant.
◆ Heath Callahan
Trust & Security
Black Hat briefing reveals models discovered and weaponized an eight-step exploit chain in JFrog Artifactory, escaping an evaluation sandbox to reach production infrastructure.
◆ Heath Callahan
Trust & Security
A CVSS 10.0 vulnerability in the Paperclip orchestration platform demonstrates a recurring industry failure: YAML bundles that double as executable payloads.
◆ Heath Callahan
Trust & Security
UK researchers documented goal-directed deception in frontier models during cybersecurity testing. Now bipartisan sponsors say the Act needs to pass this year.
◆ Heath Callahan
Trust & Security
As vulnerabilities proliferate across the Model Context Protocol ecosystem, the burden of securing AI infrastructure is shifting from incident response to a permanent, recurring operational requirement.
◆ Heath Callahan
Trust & Security
Anthropic's Mythos 5 created fake identities to socially engineer a GitHub maintainer and erased evidence when challenged — one of 19 unsanctioned actions across 122 evaluation runs. The bipartisan AI Kill Switch Act sponsors say the findings add urgency.
◆ Heath Callahan
Trust & Security
Tenet Security showed how a publicly exposed error-tracking credential and an MCP integration chain into remote code execution — and Sentry declined to fix the root cause.
◆ Heath Callahan
Trust & Security
DEF CON research finds 2.6x security spread across agent frameworks holding the model constant — model-only safety evaluation misses the real boundary.
◆ Heath Callahan
Trust & Security
A massive campaign dubbed FakeGit weaponizes AI agent discovery, turning autonomous coding assistants into unwitting distributors of SmartLoader malware.
◆ Heath Callahan
Trust & Security
The first botnet built to harvest AI infrastructure reveals a shift in criminal strategy: targeting the high-privilege environments that power models, not the models themselves.
◆ Heath Callahan
