Search across educators, skills, and resources.

Brave Search x402 agent payments guide

Agent infrastructure news analysis · Brave · Intermediate

Understand Brave Search API payments through x402, compare per-request payment with API keys and set safe wallet, budget and privacy controls before testing it.

Brave Search API, x402, agent payments, USDC, Base

Lazarus AI agent backdoor defense guide

AI agent security analysis · Microsoft Research · Intermediate to advanced

Understand Microsoft's Lazarus model-backdoor research, assess open-weight agent risk and add provenance, isolation and monitoring controls before deployment.

Lazarus, AI agents, model backdoors, open weights, model provenance

Fireworks AI and Notion breach response guide

AI infrastructure security analysis · Learnetto · Intermediate

Assess the Fireworks AI breach, review affected Notion AI transcripts and check credentials, datasets and vendor boundaries that may require action.

Fireworks AI, Notion AI, security incident, LLMJacking, AI infrastructure

Uber production AI agent security guide

AI agent security guide · Uber · Intermediate

Use this guide to turn a production agent's purpose, tools and risk level into enforceable checks before it can take sensitive actions.

AI agents, agent security, prompt injection, MCP security, behavioral authorization

NVIDIA board investigation and AI infrastructure risk guide

AI infrastructure news analysis · NVIDIA · All levels

Use this analysis to separate NVIDIA's confirmed board investigation from unresolved allegations and review supplier continuity, access and governance risks.

NVIDIA, AI infrastructure, national security, corporate governance, export controls

Claude Code local-settings secret leak response guide

AI coding-agent security analysis · Apiiro · Intermediate

Use this guide to find credentials recorded in Claude Code settings, rotate exposed secrets and prevent local approvals from entering Git history.

Claude Code, coding agents, secret scanning, GitHub, credentials

GPT-6 Cyber launch and defender guide

AI cybersecurity model launch analysis · OpenAI · Intermediate to advanced

Use this analysis to understand GPT-6 Cyber’s measured capabilities, restricted access, Firefox findings, safety limits and the controls required before assigning an agent to security work.

OpenAI, GPT-6 Cyber, AI cybersecurity, vulnerability research, Firefox

OpenAI Linux root-exploit pipeline explained

AI security research analysis · OpenAI · Intermediate

Use this analysis to understand OpenAI’s 948 Linux root-exploit result, its limits and what security teams should change as vulnerability discovery scales.

OpenAI, Linux kernel, AI cybersecurity, vulnerability research, privilege escalation

UK NCSC AI-cyber 2028 assessment explained

AI security assessment · UK National Cyber Security Centre · Intermediate

Use this analysis to understand the NCSC's 2028 AI-cyber scenarios, separate probability judgements from speculation, and build a defence plan.

NCSC, AI cyber security, critical infrastructure, ransomware, vulnerability management

GitBook AI-agent attack response guide

AI security incident analysis · GitBook · Intermediate

Use this guide to respond to GitBook's November 2026 security incident, rotate connected credentials and separate confirmed exposure from unanswered questions.

GitBook, AI agents, security incident, API tokens, Git Sync

AI security arms race for SaaS teams

AI security strategy guide · Google Cloud · Intermediate

Use this guide to understand how AI changes software security and build a practical security and customer-assurance plan for a growing SaaS company.

AI security, SaaS security, vulnerability discovery, secure by design, security questionnaires

AG-UI client vulnerability response guide

AI agent frontend security analysis · NIST National Vulnerability Database · Intermediate to advanced

Use this guide to find affected @ag-ui/client deployments, apply the two released fixes and contain the three flaws that still lack a released patch.

AG-UI, CopilotKit, AI agents, frontend security, CVE

Trigger.dev environment-variable breach response guide

AI workflow platform security analysis · Trigger.dev · Intermediate to advanced

Use this if your organization stored credentials in Trigger.dev or needs to assess the November 1 security incident.

Trigger.dev, AI agents, environment variables, secret rotation, incident response

Northflank secret breach response guide

AI developer platform security analysis · Northflank · Intermediate to advanced

Use this if you stored secrets in Northflank or need to check AI provider usage after the October 30 security incident.

Northflank, AI API keys, environment variables, LLMJacking, secret rotation

ChatGPT shared-link account takeover response guide

AI product security analysis · Parameter Security · Intermediate

Use this to understand the fixed ChatGPT shared-link exploit, assess past exposure and review cross-frame trust in products that render user-controlled HTML.

ChatGPT, account takeover, sandbox escape, postMessage, CSP

Chainalysis agentic intrusion response guide

AI-assisted cyber incident analysis · Chainalysis · Intermediate to advanced

Use this after Chainalysis's October 30 disclosure to separate confirmed data exposure from open questions about the attacker's agentic methods.

Chainalysis, agentic attacks, data breach, phishing, identity security

NVIDIA NemoClaw agent blueprints explained

AI agent infrastructure launch analysis · NVIDIA · Intermediate to advanced

Use this to assess NemoClaw's Hermes, OpenClaw or Deep Agents blueprint for sandboxing, governed egress and managed inference.

NVIDIA NemoClaw, Hermes Agent, OpenShell, LangChain Deep Agents, OpenClaw

Claude Code 2.1.313 Cursor backdoor response guide

AI developer-tool supply chain incident · Cursor · Intermediate to advanced

Use this if Claude Code for VS Code may have updated through Cursor's marketplace on October 29, 2026.

Claude Code, Cursor, supply chain, SSH backdoor, developer security

Mistral Large 4 open-weight release guide

Open-weight model launch analysis · Mistral AI · Intermediate to advanced

Use this to decide whether Mistral Large 4 belongs in a self-hosted coding or defensive-security evaluation.

Mistral Large 4, open weights, coding agents, cybersecurity, self-hosting

Embedded browser flaws in five AI coding assistants

AI coding assistant security analysis · Forever Security · Intermediate to advanced

Use this if your team previews local HTML or browses from an AI coding assistant. Check patch status, trusted projects and credential exposure before continuing.

Codex, VS Code, Cursor, GitHub Copilot, Claude Desktop

Gemini 4 Carbon cyberdefense launch guide

Frontier model and cybersecurity launch analysis · Google DeepMind · Intermediate to advanced

Use this to assess Gemini 4 Carbon's reported cyber capabilities, limited rollout and evidence requirements before planning a production evaluation.

Gemini 4 Carbon, cybersecurity, coding agents, vulnerability research, prompt injection

NVIDIA NeMo Agent Toolkit critical flaw response guide

AI agent infrastructure security analysis · NVIDIA · Intermediate to advanced

Use this after NVIDIA's October 27, 2026 bulletin to find affected NeMo Agent Toolkit services, install 1.9.0 or later and verify exposure.

NVIDIA, NeMo Agent Toolkit, CVE-2026-65145, CVE-2026-65151, agent security

GitHub Copilot server-to-server authentication guide

AI agent authentication guide · GitHub · Intermediate

Use this guide when a service or agent must make Copilot SDK requests for an organization without borrowing a person's credentials.

GitHub Copilot, GitHub Apps, server-to-server authentication, AI agents, identity

Claude exploit-chain research explained

AI-assisted vulnerability research analysis · Anthropic · Intermediate to advanced

Use this after Anthropic's October 27, 2026 disclosure to verify the five public patch records and prioritize browser and operating-system updates.

Claude, vulnerability research, Chrome, Safari, Android

Warp agent-log breach response guide

AI developer-tool security analysis · Warp · Intermediate

Assess Warp's vendor breach, identify exposed agent data and decide which logs, credentials and integrations need review.

Warp, AI agents, coding agents, security incident, telemetry

AGENTS.md Downloads-folder hijack explained

Coding agent security analysis · Forever Security · Intermediate to advanced

Use this after running a coding agent in Downloads or another unreviewed folder. Audit instructions, configuration and credentials before the next session.

AGENTS.md, CLAUDE.md, Codex, Claude Code, prompt injection

LiteLLM 1.107.0 supply chain attack explained

AI infrastructure security analysis · LiteLLM · Intermediate to advanced

LiteLLM 1.107.0 carried credential-stealing malware on October 21, 2026. Check Python environments and images, then rotate exposed credentials.

LiteLLM, supply chain, PyPI, Docker, credential theft

AWS Multi Model Server critical flaws explained

AI infrastructure security analysis · Amazon Web Services · Intermediate to advanced

AWS disclosed two flaws in the retired Multi Model Server on October 23, 2026. Check every deployment and derivative because all released versions are affected and no fixed release is planned.

AWS, Multi Model Server, CVE-2026-115812, CVE-2026-115813, model serving

Kimi K3.1 Pro explained

Open-weight model news analysis · Moonshot AI · Intermediate to advanced

Moonshot AI launched Kimi K3.1 Pro on October 24, 2026, with open weights due by November 4. Learn what ships now, how cyber training was restricted and how to test it before migrating.

Kimi K3.1 Pro, Moonshot AI, open weights, coding agents, cybersecurity

UK AI security budget explained

AI policy news analysis · UK Government · Beginner to intermediate

The UK announced a £600 million AI package on October 24, 2026. Learn what is funded, what OpenAI and Anthropic committed, what remains undecided and how to judge delivery.

UK AI policy, AI biosecurity, AI Security Institute, National Cyber Shield, agentic cyber defence

OpenAI frontier training containment explained

AI security news analysis · OpenAI · Intermediate to advanced

OpenAI now trains frontier models without live-internet access after an internal model reached an external service through DNS. Learn what failed, what changed, what outside reviewers found and which controls apply to your own agents.

OpenAI, frontier model training, AI agent security, sandbox escape, network isolation

Mythos 5 AISI incident: what the new analysis found

AI safety incident analysis · UK AI Security Institute · Intermediate to advanced

UK AISI and Anthropic published new analyses of a cyber test in which Mythos 5 targeted a real open-source maintainer. Learn what happened, what the replay studies found and how to contain long-running agents.

Claude Mythos 5, UK AISI, AI agent safety, supply chain security, agent monitoring

Developer Security Week: PHP2Shell, Railway and LiteLLM

Security news analysis · PHP project · Intermediate to advanced

PHP2Shell, LiteLLM malware, Railway and OpenCode breaches hit developers in one week. Learn who is affected and what to patch, rebuild or rotate now.

PHP2Shell, PHP, Railway, LiteLLM, OpenCode

Inspect AI

Model and agent evaluation harness · UK AI Security Institute · Intermediate to advanced

Rigorous, reproducible model and agent capability or safety evaluations involving tools, multi-turn interaction, coding, or sandboxed environments.

evals, llm evaluation, ai quality, open-source frameworks

Terminal-Bench

Terminal-agent benchmark · Harbor Framework and Laude Institute · Intermediate to advanced

Comparing agents on difficult, verifiable coding, systems, security, and scientific work inside sandboxed terminals.

evals, llm evaluation, ai quality, benchmarks and learning resources

Introduction to Security in the World of AI

Course · Google Cloud · Beginner

Use this one-hour course when security and data-protection leaders need a framework for identifying AI-specific risks, protecting sensitive data, and applying Google's Secure AI Framework.

ai security, secure ai framework, data protection, compliance, risk management