https://hackyjs.com/posts/bragjack-and-the-missing-sender-validation-in-agent-bridges Hacky JS en 2026-09-21T00:00:00.000Z BragJack and the Missing Sender Validation in Agent Bridges browser-extensions, ai-agents, web-security, postmessage, browser-security https://hackyjs.com/posts/waterplums-fake-coding-test-how-a-node-take-home-became-a-persistent-rat Hacky JS en 2026-09-21T00:00:00.000Z WaterPlum's Fake Coding Test: How a Node Take-Home Became a Persistent RAT security, malware, nodejs, devsecops, supply-chain https://hackyjs.com/posts/why-egress-allowlists-beat-policy-prompts-in-the-gemini-agent-breach Hacky JS en 2026-09-20T00:00:00.000Z Why Egress Allowlists Beat Policy Prompts in the Gemini Agent Breach ai-agents, security, sandboxing, llm-guardrails, network-isolation https://hackyjs.com/posts/why-ephemeral-ci-runners-break-standard-kernel-patch-triage Hacky JS en 2026-09-20T00:00:00.000Z Why Ephemeral CI Runners Break Standard Kernel Patch Triage linux-kernel, ci-cd, container-security, patch-management, privilege-escalation