VMs, containers, V8 isolates, WASM and agent sandboxes all promise containment. Here's what each one really stops, what it costs, and where it leaks.

https://github.com/HKUDS/LightRAG/releases/tag/v1.5.4, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61740.json, https://github.com/HKUDS ...

Nine days after GPT-6 Sol, Codex with GPT-6.1 Sol scores 77.7% FuncPass and 34.1% SecPass — within one task of GPT-6 Astra on security, a third faster, and with zero confirmed cheating.

Fable 5 has just been released as Anthropic's generally available, safeguarded Mythos-class model, with high expectations following the strong results Anthropic reported across software engineering, ...

I found a flaw in brig where an agent inside the sandbox plants a symlink resulting in an arbitrary host directory with read-write abilities in and out of the sandbox. Tracked as GHSA-wp6x-29qx-fpr7 ...

A capable frontier model isn’t a controlled system. Here are seven questions security teams should answer before they trust AI coding agents with consequential work.

In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedu ...

An invitation-only dinner for senior security and engineering executives. Hosted by Varun Badhwar, Founder & CEO of Endor Labs, and Amiram Shachar, Co-Founder & CEO of Upwind, this evening brings ...

Enter your email to be notified of changes to this list. Capitalized terms used but not defined in this Service Level Agreement have the meanings given to them in the Endor Labs Master Services Terms ...

Endor Labs detected 42 malicious npm packages forging valid Sigstore provenance. If you installed affected packages May 19, rotate all credentials now. Three things are new in this wave: The worm now ...

Endor Labs security researchers identified 88 malicious open source packages belonging to three new waves of the PhantomRaven campaign. Update 3/11/2026: Allegedly, the packages have been produced by ...