Security
Vulnerabilities, supply-chain attacks and incidents in the wild, and what to do about them.
Why is everyone suddenly putting AI agents in a box?
AI tools used to suggest code. Now they run it. What an agent sandbox is, and why every team running agents needs one.
Security roundup: 19–25 October 2026
LiteLLM poisoned on PyPI, exploited Arista, BeyondTrust and Ivanti bugs, Node.js and Brotli fixes, and an attack aimed at AI coding agents. What developers should patch.