The HackWednesday archive
Security analysis, incident lessons, and practical guides for teams working with AI. Search the archive or choose a topic.
AI in Security
OpenAI's new safety bug bounty is a useful signal for defenders: prompt injection, data exfiltration, and unsafe agent actions are no longer theoretical AI risks, but issues that need repeatable testing and response.
AI-assisted Awaiting editor review
AI in Security
Microsoft and Cisco used late-March 2026 security launches to make the same point: AI risk is no longer just about model safety, but about governing agent identity, data access, and real-time actions in production.
AI-assisted Awaiting editor review
AI in Security
The Claude Code source leak is a reminder that AI companies need the same release discipline, packaging controls, and operational security maturity they expect enterprise customers to build for themselves.
AI in Security
Claude Code can help security teams move faster on code review, detection engineering, and incident response preparation, but only if it is wrapped in clear trust boundaries, source validation, and scoped access.
AI in Security
LiteLLM’s supply chain incident was serious, but the company’s public response offers a useful case study in what good post-incident handling looks like: fast disclosure, external forensics, verified clean releases, and concrete CI/CD redesign.
AI in Security
The recent Trivy and axios incidents show how quickly a trusted package or action can become a credential theft path, and why safer CI/CD now depends on immutability, tighter secrets handling, and faster dependency response.
AI in Security
AI-assisted visualization can support faster understanding in high-pressure environments, but it needs careful framing and governance.
Security Leadership
Forward-looking security writing ages better when it anchors on durable shifts instead of calendar-year novelty.
Incident Response
A strong post-incident response needs more than containment. It needs clarity, communication, and durable operational learning.
AI in Security
Reports about Anthropic testing a far more capable unreleased model are a reminder that security teams should prepare for sharper AI-assisted offense and faster defensive automation at the same time.
Security History
Katie Moussouris helped professionalize bug bounties and vulnerability disclosure so security research could improve systems instead of collapsing into conflict.
Security History
Dan Kaminsky's DNS cache-poisoning research triggered one of the most important coordinated internet security responses of the modern era.
