BestHub
Sign in
Tagged articles

AI agent security

8 articles · Page 1 of 1
Shuge Unlimited
Shuge Unlimited
Sep 7, 2026 · Artificial Intelligence

DeepSeek Harness Approval: A Human-Machine Handoff, Not a Security Gate

This article dissects DeepSeek Harness's approval mechanism, showing it is a fail-closed human-machine handoff rather than a security boundary, covering its four outcome states, dual approval paths, async Cordis flow, per-package vs future-version authorization, host/client execution split, and orthogonal approval-sandbox knobs.

AI agent securityCordis dynamic pluginsDeepSeek Harness
0 likes · 16 min read
DeepSeek Harness Approval: A Human-Machine Handoff, Not a Security Gate
Old Zhang's AI Learning
Old Zhang's AI Learning
May 28, 2026 · Artificial Intelligence

How Anthropic Contains Claude: Three Isolation Strategies Explained

Anthropic’s engineering blog reveals that securing powerful AI agents like Claude requires focusing on blast radius and implementing three layered defenses—model, environment, and external content—through distinct isolation approaches, hard OS sandboxes, and practical lessons from real‑world pitfalls.

AI agent securityAnthropicClaude
0 likes · 11 min read
How Anthropic Contains Claude: Three Isolation Strategies Explained
DeepHub IMBA
DeepHub IMBA
May 6, 2026 · Information Security

Why MCP’s Protocol Layer Allows Prompt Injection and Hijacks Agent Context

The Model Context Protocol (MCP) embeds every tool’s description into an LLM’s context window, creating a structural “Context Poisoning” vulnerability that lets malicious or bloated tool metadata hijack agent reasoning, inflate tokens, and bypass traditional input validation.

AI agent securityLLMMCP
0 likes · 10 min read
Why MCP’s Protocol Layer Allows Prompt Injection and Hijacks Agent Context
AI Waka
AI Waka
Mar 25, 2026 · Information Security

How NemoClaw Secures Autonomous AI Agents with Kernel‑Level Sandboxing

This article examines NemoClaw’s three‑layer architecture that adds kernel‑level sandboxing, policy‑driven deployment, and flexible inference routing to OpenClaw, outlines installation steps, compares it with the native OpenClaw runtime, and discusses current limitations for production use.

AI agent securityInfrastructureNemoClaw
0 likes · 9 min read
How NemoClaw Secures Autonomous AI Agents with Kernel‑Level Sandboxing
Architect
Architect
Mar 8, 2026 · Information Security

Why OpenClaw’s Soft Boundaries Spark Security Disasters – Lessons for AI Agents

This article reviews recent OpenClaw security incidents, from a high‑profile email‑deletion failure caused by context compaction to supply‑chain attacks on Skills, analyzes the underlying architectural flaws of soft boundaries and missing execution‑time safeguards, and proposes a three‑layer hardening framework for AI agents.

AI agent securityOpenClawOperational Hardening
0 likes · 19 min read
Why OpenClaw’s Soft Boundaries Spark Security Disasters – Lessons for AI Agents
Black & White Path
Black & White Path
Feb 9, 2026 · Information Security

How a One‑Click Flaw in OpenClaw Lets Attackers Steal the Master Key and Gain God‑Mode Access

A security analysis reveals that a high‑severity vulnerability in the open‑source AI assistant OpenClaw allows an attacker to steal the master authentication token and obtain unrestricted "god‑mode" control of the host through a single malicious link, and outlines the technical cause, attack chain, and mitigation steps.

AI agent securityOpenClawRemote Code Execution
0 likes · 4 min read
How a One‑Click Flaw in OpenClaw Lets Attackers Steal the Master Key and Gain God‑Mode Access
High Availability Architecture
High Availability Architecture
Feb 6, 2026 · Information Security

How to Securely Run an OpenClaw AI Agent on a Dedicated Machine

This guide details a step‑by‑step, security‑first approach for safely experimenting with OpenClaw using a dedicated host, Tailscale private network, command whitelisting, read‑only tokens, and one‑way data flow, complete with configuration commands and emergency procedures.

AI agent securityOpenClawSandbox
0 likes · 12 min read
How to Securely Run an OpenClaw AI Agent on a Dedicated Machine
Amazon Cloud Developers
Amazon Cloud Developers
Nov 14, 2025 · Information Security

End-to-End Walkthrough: How AgentCore Identity Secures AI Agent Interactions

AgentCore Identity, an Amazon Bedrock service, offers centralized agent identity management, secure token storage, native OAuth 2.0 support, and fine-grained access control, enabling AI agents to authenticate users, retrieve and store credentials safely, and perform actions such as scheduling Google Calendar events through a detailed end-to-end flow.

AI agent securityAgentCore IdentityAmazon Bedrock
0 likes · 14 min read
End-to-End Walkthrough: How AgentCore Identity Secures AI Agent Interactions