280 posts tagged with "Security"
Cybersecurity, smart contract audits, and best practices
MCP's Enterprise Readiness Push: Why Audit Trails and SSO Matter More When Your MCP Server Can Delete a Database
MCP's 2026 roadmap treats audit trails and SSO as a security-review checkbox. For a deploy-authority MCP server, they're what turns an agent's nine-second production wipeout into a reconstructable incident instead of a lost weekend.
npm v12 Turns Off 16 Years of Automatic Code Execution: The Exact Packages You Need to Re-Approve Before Your Build Breaks
npm v12 flipped install scripts, Git dependencies, and remote tarballs to off by default after a year of worm-driven supply chain attacks — here's the exact audit of which packages need re-approving and what it means for a git-push PaaS's Node buildpack.
The NSA Just Published a Threat Model for MCP: What It Means for Your Deploy Agent
The NSA's AI Security Center named four structural risks in MCP's design — and every one already has a real 2026 incident behind it. Here's what each means concretely for a self-hosted MCP server with deploy and rollback authority.
What a Zanzibar-Style Relationship Graph Buys a Deploy MCP Server Over a Scoped API Key
AuthZed is pitching SpiceDB's relationship-graph authorization for AI agents. Here's the actual SpiceDB schema for a deploy/rollback MCP server, what it can check that a scoped API key can't, and whether running it is worth the operational cost.
SPIRE Needs Your Fleet's Shape in Advance. An Orchestrator Spawning Sub-Agents Doesn't Have One.
SPIRE requires every workload to be pre-registered before it can attest — a model that breaks the moment an orchestrator spawns sub-agents on demand. Here's the actual registration race, the ClusterSPIFFEID fix, and what it still doesn't solve.
Your Deploy Agent Has the Same Privileges as a Human Push — and No Insurance
AIUC-1 and California's AB 316 just made 2026 the year AI agent liability got real, while insurers quietly excluded it from standard coverage. Here's what's actually covered, what isn't, and the audit-trail and permission design a deploy-from-chat platform needs today.
Friendly Fire: The AI Security Review That Executes the Attack It's Supposed to Catch
AI Now Institute's Friendly Fire exploit turns Claude Code and Codex's own security reviews into remote code execution — here's how it works and what it means for scoping AI agent permissions on a deploy pipeline.
CVE-2026-50566: How Namespace-Scoped RBAC Became a 9.9 Node Compromise in Fission
A routine namespace-scoped RBAC grant let a Fission tenant escalate to node compromise — why RBAC was never a sandbox boundary, and what it means for platforms scheduling tenant code on shared nodes.
GitHub Copilot's Worktree Isolation Is Not a Sandbox — Why That Matters for Deploy-Authority Agents
GitHub's Copilot app isolates parallel agent sessions with git worktrees, not sandboxes — fine for code edits, but not enough for an MCP server that can deploy and rollback real infrastructure. Here's the concrete difference and what it means for agent-operated PaaS platforms.