Archive
模型安全、資安、隱私、供應鏈、紅隊與防護。
AI 安全
AgentJail 1.7.0 manages file, command, network, MCP, and credential permissions through a typed lifecycle, requiring grants to complete activation and auditing before use. The release also introduces trusted host connectors, while production MCP forwarding remains fail-closed to prevent data paths from opening before they are bound to native approval evidence.
代理工具
Reasonix 1.34.0 enables the CLI and desktop client to handle multi-turn MCP interactions and Apps, with embedded content now rendered in a sandboxed environment. The release also closes six security gaps involving `serve` and Git, while adding parallel scheduling, review budgets, and metrics for capability invocation.
AI 安全
Cornell Tech researchers repurpose MTP/Eagle3 modules originally designed for speculative decoding as sequence classifiers, without rerunning the main model. The method trains only about 16,000 to 20,000 parameters, but its performance depends on draft-head quality and thousands of task-specific labeled examples.
代理工具
The latest DeepSeek Harness release lets a primary agent select providers, models, reasoning effort, and output limits for subagents within its authorized scope. It also completes ACP interfaces for sessions, MCP, permissions, and cancellation. The release expands networking and external-model integrations, but the maintainers explicitly warn that its sandbox and approval mechanisms should not yet be considered secure isolation.
AI 安全
Fetchgate performed read-only handshakes with 15,329 remote URLs in the official Registry and found that 5,462 reachable endpoints sent server-level instructions. The issue extends beyond prompt injection to include recurring context costs on every turn and hidden priority conflicts among tools.
最新模型
Z.ai has released the FP8 weights for GLM-5.3, ending a two-week safety buffer imposed because of the model’s increased offensive capabilities. The model can be deployed with frameworks such as vLLM and SGLang, but large MaaS providers are additionally subject to security review requirements.
代理工具
Lemmalog separates agent memory into facts extracted by an LLM and verifiable state maintained by a rules engine. Preliminary evaluations show that it can substantially reduce context at answer time, though overall accuracy remains constrained by fact extraction and entity alignment.
AI 安全
After strengthening local inference and state-drift validation in 0.0.113, NVIDIA has further bound sandbox, inference service, and lifecycle permissions to persistently verifiable identities, preventing retry or recovery operations from taking over an environment with the same name but a different identity.
AI 安全
Researchers used Python module shadowing to make a security decoder written by Claude Code load a malicious `struct.py`, ultimately achieving remote code execution. The case shows that per-tool-call classifiers cannot replace operating system isolation, and that a zero percent success rate in official evaluations cannot be extrapolated to unseen attack chains.
代理工具
The Model Hardware Standard packages instrument capabilities, natural-language descriptions, and safety constraints into discoverable driver interfaces, enabling agents to coordinate multiple devices through MCP, a CLI, or APIs. It remains an application-only research preview, with the specification, code, and cross-model safety evaluations not yet public.
代理工具
Cursor no longer requires users to connect an existing GitHub or other source code repository first. Agents can create projects directly and operate live environments through the browser. The new workflow shortens the path from prototype to deployment, while expanding the audit scope for cloud execution, network exposure, and software supply chain permissions.
最新模型
CLAP first learns physical dynamics from unlabeled videos through latent actions, then maps the representation back to robot end-effector coordinates. The research team has released the code and multiple checkpoints, but physical hallucinations in generated videos still limit its direct use in safety-critical control.