Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
Verify what AI coding agents can actually read, write, execute and reach using synthetic canaries.
This is The Stepback, a weekly newsletter breaking down one essential story from the tech world. For more news about how AI is changing our daily lives, follow Emma Roth. The Stepback arrives in our subscribers’ inboxes at 8AM ET. Opt in for The Stepback here…
Blocking tmux terminal control for AI agents, with captured logs and live human handoff
Above, The Polecats perform, Make A Circuit With Me. Today we look at Fancy Autocomplete, er, AI. The Substack Post is against Claudefishing. Comic Sands reports on what happened after OpenAI CEO Sam Altman suggested using AI for parenting tips. Disconnect s…
