Workers learned ML-DSA on 1 October. The demo signs a greeting.On 1 October 2026 Thibault Meunier wrote up a Workers change a lot of edge code has been waiting on. Web Crypto in Cloudflare Workers can now run ML-KEM and ML-DSA, the NIST post-quantum encapsulationOct 3 · 6 min readaffixio.hashnode.dev
An approved MCP tool definition is not a forever allowPillar Security's Deadbugz write-up is a useful reminder for anyone wiring agents to Model Context Protocol servers. A malicious MCP server shipped under a harmless name, behaved like a text formatter1XSep 29 · 5 min readaffixio.hashnode.dev
MCP OAuth metadata is not a tool-call permissionOn 29 September 2026, The Hacker News covered a high-severity issue in the official Model Context Protocol Python SDK: a malicious MCP server could trick an affected client into handing over OAuth creSep 29 · 5 min readaffixio.hashnode.dev
Individually correct agent controls can still fail at the boundaryA stack of sound security pieces does not automatically make a sound agent. That is the uncomfortable claim in CONTINUITY, a September 2026 paper on composable LLM agent controls (arXiv:2609.05269). TSep 28 · 5 min readaffixio.hashnode.dev
An agent kill switch without a signed spend receipt is incompleteDigiCert's AI Trust Manager, generally available in mid-September 2026, put a clean phrase into the industry conversation: every AI agent needs a kill switch. The product centres on AI Passports, poliSep 28 · 6 min readaffixio.hashnode.dev
