Follow a subject

Security

Trace access, credentials, untrusted inputs, and the controls that separate an answer from an authorized action.

· Security · Analysis · 3 min

LiteLLM’s incident connects credentials to release authority

LiteLLM’s root-cause report describes a chain from exposed credentials to a malicious release. The operating question is whether apparently separate release controls depend on the same compromised authority.

· Vendors · Analysis · 4 min

Kapitsa brings the control room onto your Mac

Kapitsa v0.2.15 pairs serving fixes with qualified performance claims. Running a coding model locally makes network access, retained conversations, and service recovery decisions part of the team's work.

· Security · Brief · 2 min

Compound policies need inspectable decisions

SCOPE explores compiling natural-language policies into smaller predicates and explicit logic. The enterprise opportunity is a policy decision whose components can be tested, explained, and maintained separately.

· Security · Brief · 2 min

Model boundaries need tests that vary the context

A controlled pay-stub editing study probes how context changes model responses. It supports a focused application test, while its simulated setting limits conclusions about real-world outcomes or overall ethics.

· Security · Brief · 2 min

A real citation can still support the wrong claim

A biomedical claim-verification study finds that valid publication identifiers can hide irrelevant evidence. Enterprise retrieval systems should test the relationship between a claim and its source, beyond link existence.

· Enterprise Ops · Brief · 2 min

Unattended agent changes need a real way back

A new preprint proposes measuring both verifier strength and recoverability before allowing an agent to improve itself unattended. An apparently successful approval loop is not enough evidence.

· Security · Analysis · 4 min

Task completion needs an independent authorization check

AuthorizationBench examines whether agents stay inside delegated scope even when they can finish the task. The enterprise decision is where permission is enforced, observed, and reviewed.

· Security · Analysis · 3 min

Retrieved pages need an evidence boundary

Redact’s WhatsApp investigation shows why a retrieved page can contain instructions as well as information. An enterprise assistant needs a clear rule for which material may influence its behavior.

· Security · Brief · 2 min

Safety drift needs a measuring instrument you can trust

A new preprint examines how fine-tuning and reasoning settings can change model behavior. Its practical contribution is a reminder to validate the measurement before treating a safety score as stable.

· Policy · Brief · 2 min

A terms change should trigger a data-path review

Meta removed commercial-terms wording after scraping concerns. For enterprises, the useful response is to connect the contract review with an inventory of the content and systems the relationship touches.