---
title: "Security"
description: "181 posts about Security, summarised, each linking to the original."
---

# Security
> 181 posts about Security, summarised, each linking to the original.

## Articles

### [Ensuring Code Compliance in Public Sector Software Projects](https://yomu.fyi/post/ensuring-code-compliance-in-public-sector-software-projects.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Kerry Beetge
- Published: Sep 1, 2026
- Type: Explainer

Public sector software must satisfy data protection, security, accessibility, procurement, supply-chain, and infrastructure requirements while protecting sensitive citizen data. Compliance failures can expose organizations to breaches, penalties, legal costs, contract disputes, and reputational damage. The brief organizes common risks around secure development, contractual and procurement obligations, audit evidence, long-term supportability, and IT governance, noting examples such as hardcoded credentials, weak cryptography, vulnerable dependencies, license conflicts, unsupported libraries, and unchecked quality issues. It recommends embedding automated SAST, secret detection, cryptography and dependency scans, license checks, quality gates, technical debt metrics, freshness tracking, testing, and time-stamped reports into IDE and CI/CD workflows, plus self-hosted or air-gapped deployment where policy requires it. These controls are presented as ways to catch problems before production, create audit trails, support handovers, and maintain compliance over long software lifecycles.


### [When AI takes the wheel: The rise of invisible identity intelligence in 2026](https://yomu.fyi/post/when-ai-takes-the-wheel-the-rise-of-invisible-identity-intelligence-in.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Catie Kolander
- Published: Sep 1, 2026
- Type: Explainer

Point-in-time authentication treats an initial password, MFA, or passkey check as sufficient trust for the rest of a session, leaving post-login account takeovers, session hijacking, and risky API actions insufficiently evaluated. The proposed model replaces this front-door assumption with continuous context evaluation using passive telemetry such as network, telecommunications, device, behavioral, and transaction signals, then intervenes when risk scores or policy thresholds rise. For AI agents, delegated authority sets temporal, monetary, and API limits through short-lived credentials, while Know Your Agent lineage links execution to the authorizing human and deploying enterprise. High-impact actions can trigger human checkpoints through SMS, push, or voice channels, while immutable logs, transparent scoring, tenant isolation, and session lineage support auditability and compliance. The resulting architecture aims to keep low-risk autonomous work unobtrusive while making sensitive operations controllable and provable.


### [Securing Agentic Commerce](https://yomu.fyi/post/securing-agentic-commerce.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Bradford Peirce
- Published: Aug 31, 2026
- Type: Explainer

Agentic commerce is moving from AI-assisted product discovery toward purchases completed by agents, but retail systems often cannot reliably establish the shopper’s identity or spending authority. The post describes four phases—product discovery, checkout functions, delegate-to-buy, and agent-to-agent commerce—and notes standards including UCP, ACP, and AP2. Auth0’s approach combines user authentication, asynchronous authorization, and authentication for MCP, using CIMD-based agent registration, OAuth, and on-behalf-of token exchange to issue temporary, scoped transaction access. It presents third-party shopping agents and retailer-owned agents as two deployment models, with actions tied to an authenticated shopper and recorded for auditability. The proposed identity layer can sit alongside an existing identity provider while supporting emerging protocols and future autonomous purchasing.


### [Introducing Adaptive Intelligence: undermining the economics of every bot attack](https://yomu.fyi/post/introducing-adaptive-intelligence-undermining-the-economics-of-every-b.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Chris Pope
- Published: Aug 31, 2026
- Type: Announcement

Cloudflare introduces Adaptive Intelligence, a bot detection engine designed for attackers who distribute requests across proxies, vary fingerprints, and continually test defenses. It argues that deterministic, rule-based systems create stationary targets: attackers receive repeated yes-or-no feedback while defenders update on slower release cycles, making adaptation economically cheaper for attackers. The engine changes this dynamic through continuously retrained machine learning, statistical rather than fixed judgments, and planned disposable rules that appear and retire at random intervals; it also learns from corrections and misses across millions of sites. Its first component, continuous retraining of the machine-learning system behind bot score, is launching now, while disposable rule generation and broader traffic learning are described as forthcoming, with Enterprise customers enabling “Auto Update Machine Learning” to receive it.


### [Challenges in red teaming AI systems](https://yomu.fyi/post/challenges-in-red-teaming-ai-systems.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Aug 26, 2026
- Type: Explainer

AI red teaming is presented as adversarial testing intended to identify vulnerabilities and risks in AI systems, but inconsistent practices make safety comparisons difficult. The post surveys domain-specific expert testing, policy vulnerability testing, frontier-threat assessments, multilingual and multicultural work, language-model-assisted attacks, automated red teaming, multimodal testing, and crowdsourced or community-based approaches. It describes an iterative process in which experts articulate threat models and probe systems qualitatively, then standardize inputs and use language models to generate many variations for more quantitative automated evaluation. In automated red teaming, a red team model generates attacks and a blue team model is fine-tuned on those outputs to improve robustness. The conclusion calls for technical standards, independent testing capacity, professional services, third-party access, and links between red teaming and model release conditions.


### [Frontier model security](https://yomu.fyi/post/frontier-model-security.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Aug 26, 2026
- Type: Explainer

Frontier AI models and their research are presented as strategic assets requiring protections beyond ordinary commercial technology because theft or misuse could affect economic and national security. The post recommends treating advanced AI as akin to critical infrastructure, with public-private cooperation and possible procurement or regulatory requirements. Its central control is multi-party authorization: no individual retains persistent access to production-critical environments, and time-limited access requires a coworker’s approval and business justification. It also argues that NIST’s SSDF and SLSA can be adapted to model development and coupled software, creating a chain of custody that supports provenance for deployed systems. Anthropic says it is implementing these controls and other cybersecurity practices through an iterative process, while acknowledging protections must evolve as model capabilities scale.


### [How Palo Alto Networks Built a Zero](https://yomu.fyi/post/how-palo-alto-networks-built-a-zero.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Aug 17, 2026
- Type: Problem & solution

Palo Alto Networks built a new SASE Health Portal to provide real-time service health visibility for its enterprise customers. The previous architecture relied on relational databases and cloud data warehousing, which caused schema migration bottlenecks and regional lock-in. To solve this, the team deployed containerized services across multiple cloud zones in an active-active configuration. They used MongoDB Atlas as a globally replicated database, enabling automated cross-region failover and flexible document modeling for customer subscriptions. The new portal eliminates alert fatigue by allowing granular subscriptions and achieves zero relational joins for fast incident matching.


### [Build zero-trust AI agents with Google's Agent Development Kit](https://yomu.fyi/post/build-zero-trust-ai-agents-with-google-s-agent-development-kit.md)
- Company: [Google](https://yomu.fyi/company/google.md)
- Author: Shubham Saboo, Eric Dong
- Published: Aug 17, 2026
- Type: Explainer

Connecting an autonomous Agent Development Kit (ADK) agent to databases, internal APIs, and code execution turns model decisions into production-state changes that system prompts cannot securely constrain. The post presents an open-source Customer Support & Returns Agent built with ADK and Gemini, using an example where prompt injection could produce an unauthorized refund or leak environment secrets. Its zero-trust design combines hardware-backed signing for database mutations, gVisor isolation with no network egress and resource limits for generated Python, and deterministic semantic gateways for prompts, tool calls, and database updates. Local equivalents use HMAC keys, a database ingress verifier, a constrained Docker runner, and Python validation tests, while production mapping uses Cloud KMS, HSM, and VPC Service Controls. The conclusion is that infrastructure-enforced boundaries let the model reason dynamically within strict limits.


### [UBER FRAUDULENT USE POLICY – SEATTLE](https://yomu.fyi/post/uber-fraudulent-use-policy-seattle.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: Aug 13, 2026
- Type: Explainer

Uber’s Seattle Fraudulent Use Policy identifies activity that may constitute fraud across rides and deliveries, including increasing trip time or distance, creating improper accounts, claiming false fees, falsifying records, and certain cancellations. Manipulating the Uber platform or GPS system with unauthorized devices, apps, or programs is also covered. Violations may cause immediate loss of access to some or all of the Marketplace Platform, holds or adjustments to suspected fraud-related earnings, restrictions on offers, or temporary deactivation during review. Affected couriers may be notified in pay statements or through in-app communication, phone, or email, and Uber may request additional information to assess a potential violation. Appeals require contacting Support or responding through the app; review typically takes up to seven business days, and the final decision is not subject to further review.


### [Introducing Credentio: Open Source C++ Library for C2PA Content Credentials from Google](https://yomu.fyi/post/introducing-credentio-open-source-c-library-for-c2pa-content-credentia.md)
- Company: [Google](https://yomu.fyi/company/google.md)
- Author: Sherif Hanna
- Published: Aug 13, 2026
- Type: Announcement

Google introduces Credentio, an open-source C++ library for local validation of C2PA Content Credentials, initially supporting specification versions 2.2 and 2.4. The library is the code used by nearly 40 conformant C2PA-enabled Google products to process tens of billions of generated images, videos, audio files, and documents across many formats. Its API keeps validation inside the developer’s application, avoiding media transmission while providing immediate verdicts, privacy, and zero bandwidth overhead; it is also designed to maintain a small memory footprint for assets ranging from images to multi-gigabyte videos. Credentio parses manifests, assertions, digital signatures, and claims, accepts official or custom trust lists, and reports verification statuses and integrity errors, while planned work includes generating and embedding Content Credentials.


### [Introducing Claude Sonnet 5](https://yomu.fyi/post/introducing-claude-sonnet-5.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Aug 10, 2026
- Type: Announcement

Claude Sonnet 5 is introduced as an agentic Sonnet model that plans, uses browser and terminal tools, and operates autonomously. The post says it approaches Opus 4.8 performance at lower prices while improving on Sonnet 4.6 in reasoning, tool use, coding, and knowledge work. Comparisons on BrowseComp and OSWorld-Verified across effort levels show a wider cost-performance range, with higher-effort results matching Opus 4.8 on some tasks. Safety assessments found lower overall undesirable behavior, hallucination, and sycophancy rates than Sonnet 4.6, while default cyber safeguards address dangerous usage; the model is available across all plans and via the Claude API for $2 per million input tokens and $10 per million output tokens.


### [Are Supabase docs agent-friendly? We didn't know, so we checked](https://yomu.fyi/post/are-supabase-docs-agent-friendly-we-didn-t-know-so-we-checked.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: miranda\_limonczenko,nik\_richers
- Published: Aug 1, 2026
- Type: Problem & solution

Supabase found that coding agents increasingly use its documentation to configure projects, creating risks when pages omit or bury critical instructions. To measure this, the team built an evaluation for the Row Level Security (RLS) guide, running an agent through realistic tasks and grading outcomes with checklist-based and agent-based judges. The initial runs found unauthenticated anon access with write privileges across tables and showed that test guidance was skipped when separated from the policy code. Supabase responded by adding procedural revocation steps, explicit policy snippets, and colocated test examples; the eval then passed the affected checks. The project concludes that agents and humans both benefit from selective-reading-aware structure, clear sections, explicit signposting, and recurring documentation evaluations, with the RLS scenario moving into the public supabase/evals benchmark.


### [Security update (July ‘26)](https://yomu.fyi/post/security-update-july-26.md)
- Company: [Notion](https://yomu.fyi/company/notion.md)
- Author: Daniel Pyykonen
- Published: Jul 29, 2026
- Type: Incident / postmortem

Notion investigated public claims that a large dataset of its data was offered for sale on X and Breached Forums. The investigation began after the claim surfaced on June 23, 2026, and included review of publicly shared materials, sample data, and support from a third-party partner. The sample did not match data in Notion systems and contained internal duplicates and inconsistent fields; the claimed asking price and the forum user’s history also raised concerns. A deeper investigation found further inconsistencies indicating that the alleged dataset could not have come from Notion’s systems, and forum administrators later flagged the user as fraudulent. Based on the reviewed information, Notion found no evidence of a breach, customer-data access, or compromise, concluding that the alleged materials were fabricated.


### [Introducing Claude Opus 5](https://yomu.fyi/post/introducing-claude-opus-5.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jul 25, 2026
- Type: Announcement

Claude Opus 5 is available as a new model positioned near the frontier intelligence of Claude Fable 5, at half its price, while remaining behind Mythos 5 on cybersecurity tasks. Reported results show state-of-the-art performance on coding and knowledge-work evaluations, including Frontier-Bench, alongside strong results on ARC-AGI 3, Zapier AutomationBench, and OSWorld 2.0. The model uses configurable effort settings to trade intelligence for token use, speed, and cost, and is described as stronger at verifying work, iterating, and handling long agentic tasks. It costs $5 per million input tokens and $25 per million output tokens, with Fast mode running about 2.5 times faster at twice the base price. Safeguards allow vulnerability finding while blocking binary-based scanning, penetration testing, and exploit generation, with flagged requests able to fall back to Opus 4.8.


### [Introducing Claude Opus 4.7](https://yomu.fyi/post/introducing-claude-opus-4-7.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jul 23, 2026
- Type: Announcement

Claude Opus 4.7 is generally available as an upgrade to Opus 4.6, with stated gains in advanced software engineering, difficult long-running tasks, instruction following, self-verification, and higher-resolution vision. The announcement reports benchmark and tester results including a 13% resolution increase on a 93-task coding benchmark, a 0.715 tie for top score across six research-agent modules, and 90.9% on BigLaw Bench at high effort. It also describes safeguards that detect and block prohibited or high-risk cybersecurity requests, while legitimate security professionals can apply to the Cyber Verification Program. The model is offered across Claude products, its API, Amazon Bedrock, Vertex AI, and Microsoft Foundry at $5 per million input tokens and $25 per million output tokens. New controls include xhigh effort, task budgets, Claude Code’s /ultrareview, and auto mode, while migration may increase token counts because of tokenizer and reasoning changes.


### [How to Build and List Secure Cross App Access (XAA) Connections on Okta Integration Network (OIN)](https://yomu.fyi/post/how-to-build-and-list-secure-cross-app-access-xaa-connections-on-okta.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Gagan Sikri
- Published: Jul 6, 2026
- Type: Tutorial

Cross App Access (XAA) provides an identity framework for securing token-based communication when software or AI agents access external ecosystems through trusted identity providers. It replaces long-lived API keys and hardcoded secrets with real-time identity propagation, while allowing enterprises to control connected apps, requested scopes, and user access. The guide explains prerequisites for requesting and resource apps, including OIDC or SAML SSO, authorization-server support, protected resources, scopes, an Okta Integrator Free Plan org, and tested workflows. It then describes token exchange testing: requesting apps obtain an ID token and mint an ID-JAG, while resource apps validate the ID-JAG and issue a scoped access token. To seek OIN listing and XAA enablement, applicants submit SSO integration details, metadata, testing evidence, and a questionnaire to Okta.


### [Announcing Anthropic's Responsible Scaling Policy](https://yomu.fyi/post/announcing-anthropic-s-responsible-scaling-policy.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jul 3, 2026
- Type: Announcement

Anthropic announces its Responsible Scaling Policy (RSP), a set of technical and organizational protocols for managing catastrophic risks from increasingly capable AI systems, including deliberate misuse and autonomous behavior contrary to designers’ intent. The policy introduces AI Safety Levels (ASL), loosely modeled on biosafety levels, with requirements for safety, security, and operations increasing alongside a model’s potential for catastrophic risk; current LLMs, including Claude, are described as ASL-2. ASL-3 would require unusually strong security and no deployment when adversarial testing by world-class red-teamers finds meaningful catastrophic misuse risk, while ASL-4 measures remain unwritten and may depend on unresolved interpretability research. Approved by Anthropic’s board, the RSP is presented as an initial, revisable framework that may temporarily pause scaling when safety procedures cannot keep pace, while incentivizing solutions needed for further development and leaving current Claude uses and product availability unchanged.


### [More details on Fable 5’s cyber safeguards and our jailbreak framework](https://yomu.fyi/post/more-details-on-fable-5-s-cyber-safeguards-and-our-jailbreak-framework.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jul 3, 2026
- Type: Explainer

Claude Fable 5 has been redeployed globally, accompanied by additional detail about its cybersecurity safety classifiers and a proposed AI jailbreak severity framework. The classifiers distinguish prohibited use, high-risk dual use, low-risk dual use, and benign use, with intended responses ranging from blocking to allowing with monitoring; the model uses a larger safety margin than previous models, accepting more false positives to increase protection against harmful outcomes. Other safeguards include access controls, model safety training, and offline monitoring, while a HackerOne program invites researchers to submit potential cyber jailbreaks. The draft framework measures capability gain against the available baseline and illustrates scoring with Log4Shell cases, where severity changes as discoverability and existing tools change.


### [Securing Heroku CLI Credentials with System Keychain Storage](https://yomu.fyi/post/securing-heroku-cli-credentials-with-system-keychain-storage.md)
- Company: [Heroku](https://yomu.fyi/company/heroku.md)
- Author: Katy Bowman
- Published: Jul 1, 2026
- Type: Announcement

Heroku CLI 11.8.0 changes credential storage by making the system keychain the default and retaining .netrc as a fallback. The transition began in 11.6.0, when the CLI stored tokens in both locations to preserve existing workflows. The credential manager uses macOS security, Linux Secret Service through secret-tool, or Windows PasswordVault, storing credentials under “heroku-cli” with the account email as the identifier. Authentication lookup prioritizes HEROKU\_API\_KEY, then HEROKU\_NETRC\_WRITE, keychain storage, and .netrc files; unsupported or failing keychain access falls back to .netrc. Version 11.8.0 also adds a Git credential helper, so commands such as git push heroku main continue without configuration changes, while CI/CD can keep using HEROKU\_API\_KEY and Linux users may need secret-tool.


### [Teen rides return to Los Angeles](https://yomu.fyi/post/teen-rides-return-to-los-angeles.md)
- Company: [Uber](https://yomu.fyi/company/uber.md)
- Published: Jun 29, 2026
- Type: Announcement

Uber for teens is now available in Los Angeles, allowing teens to request their own rides while guardians can book rides on their behalf. The service lets guardians track trips live, sends realtime notifications, pairs teens with highly rated drivers, and keeps PIN verification and RideCheck enabled for every ride. Guardians and teens can also message the driver in a shared group chat, while on-demand pickups and dropoffs must remain within the designated service area; Reserve trips remain available outside it. To book, a guardian selects “Where to?”, changes the rider from “For me” to the relevant teen, and chooses “Uber for teens.” Trips to or from airports cannot currently be requested.


[Newer posts](https://yomu.fyi/topic/security/page/4.md) · [Older posts](https://yomu.fyi/topic/security/page/6.md)