Stack layer / Threat pattern
Elva Launches Against Postman With Flat Workspace Pricing and Specs Generated From Repo Commits
Elva (surfaced via the Product Hunt daily leaderboard for 2026-09-14)
Policy dependency / Stack layer
SGLang Hit With Unauthenticated Pickle RCE via /update_weights_from_tensor, the Fourth Critical Inference-Stack CVE in Four Weeks
CERT Coordination Center
Stack layer / Threat pattern
Two More Safety Researchers Quit Anthropic and Google DeepMind for METR, Citing the July Hugging Face Agent Attack
NBC News
Policy dependency / Stack layer
RIPPLE: an edit confined to one prompt-policy segment changes downstream behavior, so replay candidate edits after previously accepted ones before persisting
arXiv 2609.12127
Stack layer / Threat pattern
Claude Code ships `claude plugin eval`: every case runs with and without your plugin, and the delta is the only score that proves it did anything
Claude Code docs
Policy dependency / Stack layer
A replay of 68,266 real Claude Code requests says plain LRU beats the clever KV-cache policies
GitHub
Stack layer / Threat pattern
Open Source Projects Are Closing Implementation to Outsiders Because Reviewing Agent-Written Patches Costs More Than Writing Them
arXiv 2609.12236
Stack layer / Threat pattern
A Jailbreak SoK Finds Low Final-Response Attack Success Hides Compromised Planning, Memory, and Tool State
arXiv 2609.12413