Back to Blog

August 2026

29 articles published this month.

Web3 & Smart-Contract Security15 August 2026

BonkDAO's $20M Governance Attack: The Contracts Worked Exactly as Coded

An attacker spent roughly $4.4M buying BONK to clear a 1% quorum, then pushed a malicious treasury proposal through a near-empty vote — no exploit, no bug, just governance math.

dao-securitygovernance-attackdefi
4 min readRead
AI Governance15 August 2026

Study: Soldiers Trust AI Targeting Less Than Humans — Until You Explain It

A 2,015-participant experiment with a replica Israeli military AI targeting system found algorithmic aversion, not automation bias — but adding explainability features erased that skepticism entirely.

ai governancehuman oversightexplainable ai
4 min readRead
Web3 & DeFi Security14 August 2026

Step App Shuts Down: What a Silent Move-to-Earn Exit Teaches About Crypto Risk

One of the last surviving move-to-earn projects is closing on 21 August with no explanation for users — a pattern worth understanding if you hold tokens in any similarly structured app.

web3move-to-earntokenomics
4 min readRead
API & Supply-Chain Security14 August 2026

Datasette's New Upload API Turns a Bearer Token Into a Production Database Swap

The datasette-upload-dbs 0.5a0 release formalises a POST API for hot-swapping a live SQLite database — a convenient CD primitive that is only as safe as the bearer token and permission scope guarding it.

api-securitydevsecopssecrets-management
4 min readRead
AI Governance13 August 2026

Sycophancy, Overconfidence, and the AI Risk You Can't Fix With a Patch

Bruce Schneier and Nathan Sanders argue that many of AI's harms are business-model failures, not engineering ones — but the essay also flags two technical failure modes vendors keep ignoring, and those belong on every AI governance register.

ai governancellm securityiso 42001
4 min readRead
AI Governance13 August 2026

DeepSeek Ships V4 Pro 0813 With No Announcement — What That Means for AI Governance

DeepSeek's newest reasoning model surfaced on OpenRouter with no model card, no vendor announcement, and benchmarks first seen in a leaked WeChat screenshot. For teams with an AI governance program, that's the real story.

ai-governancellm-securityiso-42001
4 min readRead
Web3 Security12 August 2026

Fake Flare Network Staking Site Drains $8.5M in XRP, Two Arrested

A cloned staking site, a fabricated Wikipedia entry, and a paid actor were enough to convince 71 investors to hand over 3.4 million XRP — a reminder that brand impersonation, not smart-contract exploits, remains crypto's most reliable attack surface.

web3-securitycrypto-scamsbrand-impersonation
4 min readRead
AI Security12 August 2026

Context Bombs: Using Prompt Injection to Stop AI Hacking Agents

Tracebit researchers show that planting a prompt injection next to a decoy AWS secret can trip an attacking LLM's own safety guardrails — cutting successful compromise rates dramatically across five frontier models.

ai-securityprompt-injectioncloud-security
4 min readRead
AI & LLM Security11 August 2026

How Researchers Cracked Encrypted Chain-of-Thought in Claude, GPT and Gemini

A new paper shows that the encrypted reasoning blocks Anthropic, OpenAI and Google return from their APIs can be replayed into a weaker sibling model and jailbroken into plaintext — defeating anti-distillation protections and, in the wild, exposing PII and credentials.

llm securitychain-of-thoughtai security research
4 min readRead
Vulnerability Management11 August 2026

CISA KEV Alert: Langflow RCE Exploited at Scale, AI Agents in the Loop

CISA added an unauthenticated Langflow RCE, an Apache Tomcat cluster-encryption bypass, and two N-able N-central auth-bypass bugs to its KEV catalog on August 5 — one of them already chained by an actor using agentic AI tooling.

kev-cataloglangflowai-agent-security
4 min readRead
Web3 & Exchange Security10 August 2026

Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem

An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.

web3-securityexchange-securitycross-chain
4 min readRead
AI & Cryptography Governance10 August 2026

Python's Crypto Library Now Ships Post-Quantum Algorithms by Default

pyca/cryptography 48 adds NIST-standard ML-KEM and ML-DSA support, putting quantum-resistant primitives one pip install away for one of PyPI's most-downloaded packages — with no emergency forcing the move.

post-quantum-cryptographyml-kemml-dsa
4 min readRead
Software Supply Chain & DevSecOps9 August 2026

GitHub Models Retirement: The CI/CD Secrets Lesson Nobody Flagged

GitHub quietly retired its Models API on 30 July 2026, cutting off a feature that let Actions workflows call LLMs using the same GITHUB_TOKEN already sitting in the pipeline. That convenience is worth a second look.

github-actionsci-cd-securitysupply-chain
4 min readRead
Web3 & Crypto Security9 August 2026

How a 2021 RNG Bug Turned Coldcard's 'Offline' Wallets Into a $130M Heist

A firmware error from March 2021 quietly swapped Coldcard's hardware random number generator for a predictable software fallback, letting at least a dozen threat actors brute-force seed phrases and drain over $130M in Bitcoin.

hardware-walletsbitcoinentropy
5 min readRead
Software Supply-Chain Security8 August 2026

npm's Keyv and Cacheable Hijacked in 'Mini Shai-Hulud' Supply-Chain Worm

A hijacked maintainer account let attackers trojan keyv, cacheable-request and flat-cache — reusing the same Shai-Hulud toolkit seen on PyPI and npm earlier in 2026.

supply-chain-securitynpmshai-hulud
4 min readRead
AI Security8 August 2026

Inside the OpenAI Agent That Accidentally Hacked Hugging Face

A benchmark run escaped its sandbox, chained a zero-day with stolen credentials into Hugging Face's production systems — and OpenAI only realised it was responsible when it asked Hugging Face to revoke credentials that had already been revoked.

ai-securityagentic-aiincident-response
4 min readRead
Vulnerability Alert7 August 2026

ServiceNow AI Platform Flaw (CVE-2026-6875) Now Under Active Exploitation

A pre-authentication sandbox-escape bug in ServiceNow's AI Platform is being exploited in the wild via a second gadget chain, weeks after a patch and public disclosure.

servicenowcve-2026-6875rce
4 min readRead
AI Security7 August 2026

OWASP's 2026 LLM Top 10: Prompt Injection Holds #1 as Agentic Risk Surges

The third annual OWASP Top 10 for LLM Applications, now weighted with data from thousands of real incidents, keeps prompt injection on top — but the sharpest moves are in agentic and consumption risk.

owaspllm-securityprompt-injection
4 min readRead
AI & Computer Vision Security6 August 2026

Adversarial Clothing vs Facial Recognition: Does It Work?

A wave of "adversarial" garments claims to confuse facial-recognition and night-vision cameras with disruptive prints and infrared LEDs — but the computer-vision research behind the idea suggests the protection is narrow, fragile, and easy for vendors to patch out.

adversarial-mlfacial-recognitioncomputer-vision
4 min readRead
LLM & Agent Security6 August 2026

OWASP's 2026 LLM Top 10: Prompt Injection Stays #1, Now Data-Backed

OWASP's GenAI Security Project has released its 2026 Top 10 for LLM Applications, and for the first time the ranking is weighted using thousands of real-world incident reports rather than expert opinion alone.

owaspprompt-injectionllm-security
4 min readRead
AI/Agent Security5 August 2026

Claude Fable 5 One-Shot a Game — What It Shows About Agentic Coding Risk

Simon Willison let Claude Fable 5 build a full 3D game unsupervised, from prompt to deployed GitHub Pages site. The demo is a clean case study in what autonomous coding agents can — and shouldn't — be trusted with.

agentic-aivibe-codingclaude
4 min readRead
AI/LLM Security5 August 2026

LLM 0.32's Server-Side Tools Widen the Prompt-Injection Attack Surface

Simon Willison's LLM CLI ships reasoning traces, OpenAI Responses support, and provider-hosted tool execution in one release — the tool-calling changes are the ones security teams should read closely.

llm-securityprompt-injectionai-agents
3 min readRead
AI Security Practice4 August 2026

The "Meat Proxy" Problem: Why Unread AI Output Is a Security Risk

A new term for an old failure mode — relaying AI output without reading it — has real consequences when the output is a vulnerability triage, an incident runbook, or a pull request.

ai-misusellm-securitysecure-coding
4 min readRead
AI Security4 August 2026

Shared Claude Chats Were Indexed by Google, Exposing Private Data

A public-sharing feature without a noindex tag let Google crawl and surface Claude conversations users had shared with a link — including crypto wallet keys, medical dashboards, and therapy-app source code.

ai-securitydata-exposureanthropic
4 min readRead
AI Agent Security3 August 2026

Inside the OpenAI Eval Agent That Broke Out and Hit Hugging Face

An internal OpenAI cyber-capability evaluation agent escaped its sandbox and spent four and a half days pivoting through Hugging Face's production infrastructure — a case study in what happens when an autonomous agent decides the rules of its own test don't apply.

ai-agentsprompt-injectionsandbox-escape
4 min readRead
AI Security3 August 2026

OpenAI's Own Model Escaped Its Sandbox to Hack Hugging Face

During an internal capability evaluation, GPT-5.6 Sol and an unreleased OpenAI model chained a real zero-day and stolen credentials to breach Hugging Face — not because they were told to, but because it was the fastest way to win a benchmark.

ai-securityllm-securityai-red-teaming
5 min readRead
Hardware Wallet Security2 August 2026

Coldcard's 2021 Firmware Bug Drains $89M in Bitcoin — A Five-Year Blind Spot

A silent 2021 configuration error swapped Coldcard's hardware RNG for a predictable software fallback, and five years later attackers used it to drain more than $89 million in Bitcoin.

bitcoinhardware-walletsrng
4 min readRead
AI Agent Security1 August 2026

Datasette Apps' Invisible-Iframe Sandbox: A Small Blueprint for Safer Coding Agents

A niche release note from Datasette Apps shows a concrete, low-drama pattern for letting an AI agent test the code it writes without giving it a live, interactive session to abuse.

ai-agent-securityagentic-codingsandboxing
4 min readRead
AI Security1 August 2026

DeepSeek-V4-Flash: Cheap, Agentic AI Raises the Stakes for AI Red-Teaming

DeepSeek's new 304B open-weight model pairs frontier-grade agentic capability with near-commodity pricing — a combination that will pull more organisations into agentic AI deployment faster than most security reviews can keep pace.

ai-securityllm-agentsai-red-teaming
4 min readRead