other
OWASP is a nonprofit community publishing open security standards and guidance, known for its Top 10 risk lists covering web, API, and LLM applications.
No evidence-backed relationships are recorded.
CyberXDefend counts about 11 named attacks on AI agent memory and learning, three of them demonstrated on production ChatGPT and OpenClaw. It found no confirmed criminal campaign, but in each case one poisoned write outlives the session, the property behind OWASP's ASI06 category.
Reality
Vectorize CEO Chris Latimer says coding agents he used wrote API keys, credentials and sensitive documents into plain-text long-term memory. His attack scenario is hypothetical, and it still puts agent memory on the list of places where secrets live.
Reality
Retried Buy clicks get the original order back in a dev.to guide that commits each order with its attempt key in one SQLite transaction. A disabled button only cuts double-clicks, and the guide's available text ends before it covers charging the card.
Reality
OpenAI's August 19 update promises it keeps nothing after a request. The copies your own app leaves behind in logs, queues and databases are governed by you, not by a toggle.
Perspective Coverage
5 publishersReality
Qrator says x47.c, a Windows botnet sold for up to $950, burns a victim's OpenAI or xAI credit with a valid API key while the website stays up. Website filtering never sees the requests, so the defenses are key revocation and spending caps.
Perspective Coverage
3 publishersReality
Dev.to author dharani2d argues agent security depends on who picks the next tool call, citing Excessive Agency's rise from sixth to third at OWASP. The proposed control plane keeps identity, authorization, argument checks and approvals in deterministic code outside the model.
Reality
Three separate IDs and one Postgres row per retry let an investigator list every attempt for a tenant in order, according to a dev.to design. Adopting it means carrying an operation ID into every enqueue call, and its sample redactor lets bearer tokens through.
Reality
Disclosure volume is climbing faster than the process around it. CISA's answer is a framework that describes what a good CVE record is and how the program should be judged on producing one.
Perspective Coverage
3 publishersReality
Patrick Wardle published working code that sends Muse's dictated audio to a server of the attacker's choosing. Because the assistant holds file, microphone, camera, calendar and paired-iPhone access, whoever redirects it inherits all of it.
Perspective Coverage
3 publishersReality
OWASP's August 3 edition added no categories and removed none, yet eight of the ten entries changed rank, with Unbounded Consumption up four places and Improper Output Handling down five. Prompt Injection still holds first.
Reality
Forcepoint's unguarded research agent ran 500 tool calls for a simulated $10, a total set by the test's own ceiling, while the same scenario with a call budget, recursion cap and circuit breaker ended after one call and $0.02.
Reality
A dev.to post keeps the spend ceiling in an authorization service the agent has no credential for, reserving each job's maximum charge before dispatch and accepting fewer concurrent admissions per period as the cost.
Reality
Air Security's Plugin4Shell lets a plugin be swapped during a background refresh while the agent reports the audited commit. Anthropic and OpenAI have patched, Copilot has no fix, and Google is retiring Gemini CLI.
Reality
A dev.to post argues that model-assisted analysis has made decompiled Android code cheap to understand, and proposes DEX encryption plus a native interpreter as the answer. Its own feature list shows what that costs to adopt.
Reality
An architecture record for a health-data service spends one log event per deployment attempt, deriving the key fingerprint under an audit key held outside the log pipeline and holding the trail to 90 days.
Reality
An identity provider's history proves a factor challenge succeeded, so SOC 2 evidence for what the application decided next has to come from its own append-only event, with the policy version recorded at the moment of the decision.
Reality
The sixth item in OWASP's mobile list is rated low technical impact and severe business impact. A dev.to walkthrough argues React Native stacks carry extra exposure, and the reason it gives is the telemetry that arrives with dependencies.
Reality
A dev.to post argues the OWASP Top 10 for LLM Applications 2025 is a list of things a better model will not fix, including over-scoped permissions, unvalidated agent output, and retry loops that bill by the token.
Reality
The startup's agents draft security policies and gather audit evidence, and its founders say a person still approves each policy while an independent auditor still signs the report.
Perspective Coverage
3 publishersReality
Cognito validates the redirect target by matching it against the app client's allowed callback list, so a development entry nobody removed is a valid destination for an authorization code, or for the tokens themselves where implicit grant is still on.
Reality
Build · September 13, 2026 · 1 publisher
Leadership · September 13, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher
Science · September 10, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher
Build · September 9, 2026 · 1 publisher
Build · September 7, 2026 · 1 publisher
Build · September 6, 2026 · 1 publisher
Build · September 5, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Invest · September 2, 2026 · 2 publishers
Build · August 30, 2026 · 1 publisher
Build · August 29, 2026 · 1 publisher
Invest · August 28, 2026 · 1 publisher
Build · August 28, 2026 · 1 publisher
Build · August 26, 2026 · 1 publisher
Product · August 25, 2026 · 1 publisher
Build · August 24, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Build · August 19, 2026 · 1 publisher
Security · August 18, 2026 · 1 publisher
Build · August 17, 2026 · 1 publisher
Build · August 16, 2026 · 1 publisher
Security · August 15, 2026 · 1 publisher