VMs, containers, V8 isolates, WASM and agent sandboxes all promise containment. Here's what each one really stops, what it costs, and where it leaks.

Nine days after GPT-6 Sol, Codex with GPT-6.1 Sol scores 77.7% FuncPass and 34.1% SecPass — within one task of GPT-6 Astra on security, a third faster, and with zero confirmed cheating.

https://github.com/HKUDS/LightRAG/releases/tag/v1.5.4, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61740.json, https://github.com/HKUDS ...

Fable 5 has just been released as Anthropic's generally available, safeguarded Mythos-class model, with high expectations following the strong results Anthropic reported across software engineering, ...

I found a flaw in brig where an agent inside the sandbox plants a symlink resulting in an arbitrary host directory with read-write abilities in and out of the sandbox. Tracked as GHSA-wp6x-29qx-fpr7 ...

A capable frontier model isn’t a controlled system. Here are seven questions security teams should answer before they trust AI coding agents with consequential work.

In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedu ...

An invitation-only dinner for senior security and engineering executives. Hosted by Varun Badhwar, Founder & CEO of Endor Labs, and Amiram Shachar, Co-Founder & CEO of Upwind, this evening brings ...

Enter your email to be notified of changes to this list. Capitalized terms used but not defined in this Service Level Agreement have the meanings given to them in the Endor Labs Master Services Terms ...

Codex with GPT-6 Sol scores 72.1% FuncPass and 25.1% SecPass for $104 on Azure — 78% cheaper than Astra ($468) — with zero confirmed cheating.

Endor Labs discovered a critical vulnerability in n8n (CVE-2026-25049) that allows unauthenticated users to achieve remote code execution (RCE) via sandbox escape. We discovered a critical ...