TLDRocket
Sign in

Agent Security

141 summarised stories about Agent Security, each linking back to the original source. Browse all topics →

+ Follow this topic

Wednesday, 12 August 2026

Coding agents ignore open source contribution guidelines, researchers find.

The New Stack 2 months ago 25

Researchers at Peking University found autonomous coding agents often ignore open-source contribution rules and fail to handle AI-banned repositories correctly. In tests across four frontier models on 106 issues from 49 repositories, the agents almost never proactively retrieved contribution rules and never refused to contribute to AI-banned projects even with reminders. Maintainers are pushed toward external controls like adding policy discovery to tooling, blocking PRs via allowed tools, routing AI-flagged changes for heavier review, and relying on standard SDLC checks rather than expecting agents to self-police.

[AINews] How to steal a Reasoning Trace

Latent Space 2 months ago 33 ● 3 sources

A paper shows how attackers can replay encrypted “reasoning” trace blocks from frontier AI API responses into other sessions/accounts to induce weaker models to transcribe the hidden chain-of-thought. Scanning about 7,000 public traces found 62 unique API keys, 33 email addresses, and 33 passwords inside decoded reasoning blobs. As a result, providers and users need to treat shared trace logs as a direct privacy risk and harden sandboxing/telemetry/tool interfaces to prevent reasoning exposure.

The daily briefing

Every AI story that matters, in your inbox by 8am.

TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.