Workers learned ML-DSA on 1 October. The demo signs a greeting.Cloudflare's new Web Crypto flag is a real primitive, it is opt-in, and it will sign whatever bytes you hand it.6 min read·affixio.hashnode.devOct 3
An approved MCP tool definition is not a forever allowPillar Security's Deadbugz write-up is a useful reminder for anyone wiring agents to Model Context Protocol servers. A malicious MCP server shipped under a harmless name, behaved like a text formatter5 min read·affixio.hashnode.dev1XSep 29
MCP OAuth metadata is not a tool-call permissionOn 29 September 2026, The Hacker News covered a high-severity issue in the official Model Context Protocol Python SDK: a malicious MCP server could trick an affected client into handing over OAuth cre5 min read·affixio.hashnode.devSep 29
Individually correct agent controls can still fail at the boundaryA stack of sound security pieces does not automatically make a sound agent. That is the uncomfortable claim in CONTINUITY, a September 2026 paper on composable LLM agent controls (arXiv:2609.05269). T5 min read·affixio.hashnode.devSep 28
An agent kill switch without a signed spend receipt is incompleteDigiCert's AI Trust Manager, generally available in mid-September 2026, put a clean phrase into the industry conversation: every AI agent needs a kill switch. The product centres on AI Passports, poli6 min read·affixio.hashnode.devSep 28
