Why I Don't Let My AI Agent Apply Terraform
How Terraform Boundary separates AI planning from human-approved infrastructure changes with agent hooks, read-only credentials, and a gated apply process.
HCS (Hashgraph Consensus Service) Blog4 min read
Model Context Protocol
21 stories
Why I built GlanceFlow: knowing what Claude Code is doing, at a glance
GlanceFlow is a Claude Code mod that shows one calm, plain-English checklist above the prompt: the plan, live progress, and when Claude needs you.
HCS (Hashgraph Consensus Service) Blog3 min read
Launch story: Roomcomm
Roomcomm gives Codex and other agents a shared, verifiable room for cross-owner coordination, with signed history and stable posting-key identity.
HCS (Hashgraph Consensus Service) Blog3 min read
Claude Code tried to dump your Kubernetes secret
Claude Code tried kubectl get secret db-credentials -o yaml. HOL Guard paused the Secret read. Allow just this once or Keep blocked, and how to test it.
HCS (Hashgraph Consensus Service) Blog3 min read
BREAKING: Next.js image optimizer SSRF and cache poisons in September 2026 release
How to fix CVE-2026-94483: upgrade next to 15.5.27 or 16.3.8
HCS (Hashgraph Consensus Service) Blog5 min read
Claude Code approved itself: Guard paused the self-click
Claude Code tried to approve itself with hol-guard approvals approve. HOL Guard paused it. Allow just this once or Keep blocked.
HCS (Hashgraph Consensus Service) Blog3 min read
Your Erlang TLS 1.3 client can trust a server with no certificate
How to fix CVE-2026-89422: upgrade Erlang/OTP to 29.1.1, 28.5.0.7, or 27.3.4.18
HCS (Hashgraph Consensus Service) Blog5 min read
Temporal write access can run shell on your Worker Service host
How to fix CVE-2026-89139: upgrade Temporal Server to 1.31.3 or 1.30.7
HCS (Hashgraph Consensus Service) Blog5 min read
BREAKING: OpenShift console Devfile API lets anyone SSRF your cluster
CVE-2026-75885 fixes are available across seven OpenShift 4 trains. Upgrade to the fixed release for the train you operate.
HCS (Hashgraph Consensus Service) Blog2 min read
BREAKING: WordPress comment XSS lets strangers plant script (7.1.1)
How to fix CVE-2026-93485: upgrade WordPress to 7.1.1. Same-day 7.1.1 security release also closes 10 other core issues.
HCS (Hashgraph Consensus Service) Blog5 min read
Aborted multer uploads still fill the disk after the 5038 fix
How to fix CVE-2026-88932: upgrade multer to 2.4.0 Abort a multer disk upload before the storage engine names the file, and the complete write can still land…
HCS (Hashgraph Consensus Service) Blog3 min read
BREAKING: Unbound DNSKEY digest overflow can RCE your resolver (1.26.1)
How to fix CVE-2026-81642: upgrade Unbound to 1.26.1. Same-day NLnet Labs release also patches CNAME heap corruption, DoH UAF, ReTrap DoS, and related resolver bugs.
HCS (Hashgraph Consensus Service) Blog5 min read
Hidden command in Claude Code: base64 piped to sh
Claude Code packed a hidden command in base64 and piped decode into sh. HOL Guard paused it. Allow just this once or Keep blocked.
HCS (Hashgraph Consensus Service) Blog3 min read
Keep a Codex Task on Track Through Compaction with Context Guard
A practical Context Guard walkthrough: define requirements, compact a Codex task, recover the checklist, and verify the finished document.
HCS (Hashgraph Consensus Service) Blog4 min read
ScreenConnect client file runs hit CISA KEV
How to fix CVE-2026-84869: upgrade ScreenConnect to 26.6.5 or later, then reinstall host clients and update access agents. Same-day CISA KEV on client file-transfer execution without Host confirmation.
HCS (Hashgraph Consensus Service) Blog4 min read
Self-managed GitLab: unauth commits API file read hits CISA KEV
How to fix CVE-2026-85706: upgrade GitLab to 18.11.12 / 19.0.9 / 19.1.8 / 19.2.6 / 19.3.2
HCS (Hashgraph Consensus Service) Blog4 min read
Your agent tried to ship your AWS keys
Claude Code tried to send your AWS keys off the laptop. HOL Guard paused the curl. Allow just this once or Keep blocked. Keys stay put until you tap.
HCS (Hashgraph Consensus Service) Blog4 min read
Artifactory anonymous token chain hits CISA KEV
How to fix CVE-2026-42018 / CVE-2026-42016: upgrade self-hosted Artifactory past the anonymous-JWT and token-scope floors (prefer 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20)
HCS (Hashgraph Consensus Service) Blog5 min read
Showing 18 of 21 stories
Load more storiesAiByts Weekly Brief
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news from HCS (Hashgraph Consensus Service) Blog
Join 15,000+ AI enthusiasts