AWS Security LIVE! from Black Hat

James Anderson

The Witness Was the Suspect: Why AI Audit Logs Can't Be Trusted

#ai #security #agents

Oct 5

Robert Adamson

We Gave AI Agents Real Tools — Then Realized “Just Ask Before Acting” Wasn’t Enough

#ai #security #programming

Oct 5

Vansh Sharma

When Skipping an API Error Can Delete Valid Data: A Cartography Fix

#python #opensource #cncf

Oct 5

Sofia_ Humanbound

Your agent's trust boundary is the plumbing: a DNS escape, a root shell in seconds, and a warning that came too late

#ai #security #opensource

Oct 5

aiXis

Every app on your Mac is talking to the internet - I built a map of it (zero telemetry)

#opensource #privacy #showdev

Oct 5

Sammi De Blas

AI Recommends Packages Attackers Registered First

#ai #security #agents

Oct 5

Anas Sheikh

That Wildcard in Your next/image remotePatterns Config Might Be an SSRF Hole

#nextjs #webdev #security

Oct 5

jj1423

Beyond the package name: why following the call is the hard part of supply-chain security

#vulnerabilities #security #supplychain

Oct 5

Emirhan

Agent security has two failure modes: miss the attack, or break the work.

#ai #security #cybersecurity

Oct 5

kozhevniko

Drupal Contributed Modules: 36 CVEs in One September 2026 Advisory Batch

#security #drupal #vulnerability

Oct 5

Razan

I built an open-source, end-to-end encrypted messaging web app using Supabase and WebRTC 🔐

#webdev #opensource #javascript

Oct 5

Freddie Thompson

Multi-Tenant Database Isolation: RLS, Schema-per-Tenant, and the Migration Wall

#architecture #database #postgres

Oct 5

Brenn Hill

Least Privilege for AI Agents: Grant Only What the Task Needs

#ai #security #llm

Oct 5

KeyVault Edge

How to audit your codebase for exposed API keys (free tools)

#security #git #devops

Oct 5

Matheus Feijão

Hallucination blocked before the human

#ai #security #compliance

Oct 5