#security

Discover how the normalization of deviance threatens AI systems (or why companies gradually accept risky shortcuts)

Bruce Schneier argues we still lack defenses against malicious LLM inputs and outlines why current security approaches fall short.

Explaining slopsquatting—the tactic of registering fake packages that LLMs hallucinate, priming supply-chain attacks.

Notes from May–June explorations: AI agents, security quirks, regulation chatter, and context engineering experiments.

Simon Willison outlines the lethal trifecta for AI agents—private data, untrusted content, and external communication risks.

Exploring the security risks of MCP and why it may not be production-ready. Key vulnerabilities include shell access and secret exposure.