Secondary readers
2026.282The PII moved into a vault. Every reader that was already there came along, unexamined.
security
all tags →The PII moved into a vault. Every reader that was already there came along, unexamined.
Go spent eight months on dependency cooldown, then closed it by moving it to the proxy. Nobody had to decide whether it works.
An LLM in the middle of a fetch pipeline took orders from the file it was summarizing.
Three rediscoveries, three different vulnerabilities, all marked duplicate of #1465. Some bugs are doing a job.
Three checks and the developer assumes the fourth is covered. That gap is where the damage hides.
Your code already leaves the machine. The agent just gave it another surface.
A week in the agent ecosystem. Routing layers with an LLM attached, not development partners.
Scanners find what's syntactically wrong. The interesting issues live in assumptions -- and assumptions don't have signatures.
A regulation arrives. The work looks like encryption at first. It is not.