Vibe CodingLasso Defender: Runtime Prompt Injection Detection via PostToolUse HookLasso Security·high signalXBlueskyLinkedInCopy linkOpen-source claude-hooks tool adding 50+ detection patterns for prompt injectionSourceSource pageLasso Security↳ Follow the threadPolicy dependency / Stack layerRust's crates security team warns of an active campaign social-engineering maintainers over fake video callsSimon Willison's Blog (Rust Blog)Policy dependency / Stack layerA Cheap Read-Only Verifier Captures Nearly All the False-Pass Benefit of a Full Planning StackarXiv 2609.20474Policy dependency / Stack layerThree SBOM Generators Diverge Systematically on 3,000 Projects, 14 Months Before the CRA Makes SBOMs MandatoryarXiv 2609.19920Stack layer / Threat patternGoose 1.51.0 deletes planning mode and the recipe-creation command from the CLIGitHubStack layer / Threat patternSplitting a prompt-injection payload across two MCP channels took models that resist single-channel injection to 100% credential exfiltrationarXiv 2609.18217Stack layer / ContrastCactus Needle 3 is a 121M-parameter tool-calling model that ships in 8-29MB slices and refuses to chatCactus Compute / Hugging Face (via r/LocalLLaMA, 183 upvotes)Stack layer / Threat patternComp AI Raises $34M Series A for Agents That Write Policies, Collect Evidence and Run AI Pen TestsTechCrunch (single source, figures are as reported)Policy dependency / Stack layerVercel Sandbox can now run Terminal-Bench, SWE-bench and OSWorld with a single --env vercel flagVercel Changelog