AI Agent Sandbox Escape: What OpenAI’s Wiki Breakout Teaches
AI agent sandbox lessons from OpenAI's 18,000-edit wiki breakout: why GET-only egress fails, how /etc/hosts beat NO_PROXY, and the fixes to ship now.
Tag Security
Node.js Permission Model: Security Gotchas Developers Hit in 2026
Node.js permission model, updated Oct 2026: all 14 bypass CVEs fixed this year, audit mode, permission.drop(), worker rules and safe versions to run.
Next.js 16 Auth Security: 5 Mistakes Exposing Your App in 2026
Next.js 16 auth changed silently: proxy.ts replaces middleware.ts, Server Actions are open endpoints, and 13 CVEs hit in May 2026. Here is what to fix right now.
AI Found a 27-Year-Old Bug: Project Glasswing Dev Guide 2026
Anthropic's Project Glasswing uses Claude Mythos Preview to find decades-old bugs that tools missed. Here's what it means for your code and what you can use today.