Social Media Ideas for Codex Security

OpenAI Open Sources Codex Security CLI for the Merge Path

OpenAI has released its Codex Security command-line interface and software development kit as open source software under the Apache 2.0 license, providing a new way to bring its AI...

OpenAI Open-Sources Codex Security CLI for Finding, Validating, and Fixing Security Vulnerabilities

OpenAI has open-sourced Codex Security, a command-line tool and TypeScript SDK designed to help developers find, validate, and fix security vulnerabilities in their codebases. The...

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give...

A Security Collection for the Security Chapter

ImageX: Building a Multi‑Layered Defense with Drupal: Top Security Tools and Practices

A truly secure Drupal site is protected on multiple levels. The web presents a wide range of threats, and each one can be countered with specific modules and techniques. When combi...

Claude, Codex, and Hermes installed unowned code inside corporate networks

227 install commands were found in corporate docs pointing at code nobody owns.

Codex Tray: Monitor OpenAI Codex Usage on Windows

Codex Tray puts weekly Codex usage, reset timing, reset credits, token totals, and reset alerts in the Windows notification area.

Researchers found sandbox escapes or boundary bypasses in Cursor, Codex, Gemini CLI, and Antigravity by writing files tr...

Ax Sharma / BleepingComputer: Researchers found sandbox escapes or boundary bypasses in Cursor, Codex, Gemini CLI, and Antigravity by writing files trusted tools later use; most ar...

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Goo...

Critical Flaws in Claude Code, Gemini CLI, and OpenAI Codex Enable RCE and Supply Chain Attacks

Security researchers have disclosed a vulnerability affecting AI coding-agent workflows from Anthropic, Google, and OpenAI. Their research highlights how an attacker-controlled iss...

Hugo van Kemenade: Security: line goes up

Like many other projects, CPython is experiencing a huge increase in security reports. CVEs per year #Last month, PSF Security Developer-in-Residence Seth Larson posted a chart of...

Securing Model Context Protocol Servers: 4 Gates From Code to Production

I was showing off a support assistant I'd wired up over the Model Context Protocol. Small thing: it could search our docs and open a doc by name. A teammate, being a teammate, past...

Security Baked Into the JVM: the Safe Codebase Audit Pipeline

In Part 1, the minimal deployment showed constraints traveling with the proxy: authentication, encryption, hardened deserialization, all declared in configuration and enforced at t...

AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push

Amazon Web Services is threading its AI-powered security infrastructure directly into the coding environments built by two of its fiercest rivals — and in doing so, it is making a...

The Asset Library Nobody Includes in the Security Review

Security teams map their data thoroughly. Customer records, financial systems, source code repositories, HR files: all identified, classified and controlled. Then there is the mark...

The fix for the AI agent that hijacked a company's DNS: it can propose the change, but it can't approve it

A security agent read a Cloudflare log, found an attacker’s prompt-injection payload sitting inside it, and rewrote the company’s DNS. The firewall had already blocked that payload...

My Solana Program Security Checklist

My Solana Program Security Checklist This is for anyone shipping an Anchor program to mainnet — especially if you're coming from a web2 background and looking for the Solana equiv...

Secure Claude Enterprise with Cisco AI Defense

Teams are putting Claude Enterprise to work fast, and not just for chat. Claude, Claude Code, and Claude Cowork act on behalf of users. They read documents, call tools, and run tas...

Talking Drupal: Talking Drupal #567 - Common Vulnerabilities & Exposures

Today we are talking about Security, Vulnerabilities, and how to avoid exposure with guest Dave Welch. We'll also cover Security Scanner as our module of the week. For show notes v...

Companies test Codex, but Claude Code remains the preferred choice among engineers

The preference for Claude Code over Codex highlights a shift towards AI tools that excel in complex, context-heavy tasks, impacting enterprise strategies. The post Companies test C...

Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy

The USENIX study found 31 vulnerabilities, including six directly validated paths and 25 high-risk cases. The post Coinbase and 14 other x402 facilitators failed security tests bui...

Security Baked Into the JVM: two Subjects, one call

The constraint system stops a bad call before it leaves the JVM. The Safe Codebase Audit Pipeline stops bad code before a client ever loads it. What remains is identity: who is cal...

OpenAI ‘open-sourced’ its AI security scanner. The scanner is still locked up.

OpenAI has open-sourced an AI tool that hunts for security holes in your code. There is a catch: the part that does the hunting is still locked behind its approval. The company qui...

Security Audit Report: Reentrancy & Access Control Review: Poloniex

Security Audit Report: Reentrancy & Access Control Review: Poloniex Target Protocol: Poloniex (TVL: $1493.5M) Security Audit Report: Reentrancy & Access Control...