hashgraph-online/hol-guard

CodeEraser: the write that would bloat your repo is refused before it lands
2026-11-05 · hol.org

Launch story: OpenCode Hush
2026-11-05 · hol.org

How to secure MCP OAuth discovery against SSRF
2026-11-05 · hol.org

What is MCP token passthrough? Risks and safer designs
2026-11-05 · hol.org

What are MCP tool annotations? A practical security guide
2026-11-04 · hol.org

Best Kimi Plugins in 2026
2026-11-04 · hol.org

BREAKING: A crafted photo upload can read and write files on Rails servers. Upgrade Active Storage to 8.1.4.1 or 8.0.5.2
2026-11-04 · hol.org

QuietOS: the governor for the hands that hold the keys
2026-11-03 · hol.org

WordPress update hijack bug is now on CISA's exploited list: check your last update (CVE-2026-119977)
2026-11-03 · hol.org

BREAKING: Docker Desktop on WSL 2 lets a container reach the Windows host (CVE-2026-112917). Update Desktop and WSL
2026-11-03 · hol.org

Attackers are deploying bots through Node-RED editors with no login (CVE-2026-58115, Siemens IoT2050)
2026-11-03 · hol.org

Best practices for reviewing AI agent tool calls
2026-11-02 · hol.org

How to test AI agent permissions without production data
2026-11-02 · hol.org

What is least privilege for AI agents?
2026-11-02 · hol.org

Best Cursor Plugins in 2026
2026-11-02 · hol.org

Barracuda Email Security Gateway: two new bugs chain from no login to root through the admin page (CVE-2026-116606, CVE-2026-111560)
2026-11-02 · hol.org

b2bsearch MCP: B2B contacts and account signals, with a spend cap on every call
2026-11-01 · hol.org

Covering Seminara MCP with HOL Guard
2026-11-01 · hol.org

Introducing CoMPaSS: An Analysis-First Prompt Framework for AI Agents
2026-10-31 · hol.org

BREAKING: Patched Ivanti Connect Secure on Oct 13? The root-escalation half of the chain is now on CISA KEV (CVE-2026-111357, CVE-2026-118527)
2026-10-30 · hol.org

BREAKING: ClickHouse Server unauthenticated RCE (CVE-2026-116366). What to upgrade and who is exposed
2026-10-30 · hol.org

BREAKING: Claude Code 2.1.312 and 2.1.313 in Cursor's marketplace planted an SSH backdoor. How to check and clean up
2026-10-30 · hol.org

Attackers are rebooting Cisco ASA and FTD firewalls through the SSL VPN login. CVE-2026-76418 is on CISA KEV, due Nov 1
2026-10-29 · hol.org

BREAKING: GitLab CVE-2026-97229 is on CISA's exploited list, and upgrading GitLab alone may leave you open
2026-10-29 · hol.org

BREAKING: Langflow CVE-2026-93680 and 32 more bugs. Strangers can get into 1.12.x servers, so upgrade to 1.13.0
2026-10-29 · hol.org

VMware ESXi zero-day hid attacker commands from the logs: CVE-2026-41709 is on CISA KEV. Patch, then stop trusting local ESXi logs
2026-10-28 · hol.org

Fragnesia CVE-2026-46300 is on CISA KEV: the Linux kernel bug that turned a web shell into root. Check memory, then patch
2026-10-28 · hol.org

BREAKING: WordPress 7.1.4 closes a no-login takeover window during core updates. Update, then lock wp-content/upgrade/
2026-10-28 · hol.org

Best Claude Code Plugins in 2026
2026-10-28 · hol.org

BREAKING: Tailworm turns one hacked laptop into root on your Tailscale SSH servers. Upgrade to 1.104.4 (TS-2026-014)
2026-10-28 · hol.org

Magento PolyShell (CVE-2026-48356) is on CISA KEV: install APSB26-73, then hunt the webshells
2026-10-27 · hol.org

BREAKING: A LiteLLM Enterprise proxy will leak its master key to a request with no API key. Upgrade to 1.106.5 (GHSA-w4c7-34wj-hqm8)
2026-10-27 · hol.org

BREAKING: The Brotli decoder bug is now on CISA's exploited list after a first attack on Node.js 24.22.0 (CVE-2026-111497)
2026-10-27 · hol.org

My Store Gave Away Every Product It Sold. The AI That Built It Never Noticed.
2026-10-27 · hol.org

Your AI Isn't a Mind Reader. Stop Prompting Like It Is.
2026-10-27 · hol.org

Your AI Agent Can Write Code. But Can It Think Like a Principal Engineer?
2026-10-27 · hol.org

Launch story: Foundry, the growth ops kernel for ad agencies
2026-10-27 · hol.org

Best Codex Plugins in 2026
2026-10-27 · hol.org