https://hackyjs.com/posts/why-egress-allowlists-beat-policy-prompts-in-the-gemini-agent-breach Hacky JS en 2026-09-20T00:00:00.000Z Why Egress Allowlists Beat Policy Prompts in the Gemini Agent Breach ai-agents, security, sandboxing, llm-guardrails, network-isolation https://hackyjs.com/posts/why-ephemeral-ci-runners-break-standard-kernel-patch-triage Hacky JS en 2026-09-20T00:00:00.000Z Why Ephemeral CI Runners Break Standard Kernel Patch Triage linux-kernel, ci-cd, container-security, patch-management, privilege-escalation https://hackyjs.com/posts/auditing-plugin4shell-auto-load-paths-in-claude-code-codex-copilot-and-gemini-cli Hacky JS en 2026-09-19T00:00:00.000Z Auditing Plugin4Shell Auto-Load Paths in Claude Code, Codex, Copilot, and Gemini CLI security, ai-coding-agents, rce, supply-chain, developer-tools https://hackyjs.com/posts/why-a-github-repo-is-not-a-trust-signal-the-rapuncel-lastpass-campaign Hacky JS en 2026-09-19T00:00:00.000Z Why a GitHub Repo Is Not a Trust Signal: The Rapuncel LastPass Campaign security, malware, github, supply-chain, lastpass