惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

L
LangChain Blog
阮一峰的网络日志
阮一峰的网络日志
WordPress大学
WordPress大学
博
博客园 - 司徒正美
罗
罗磊的独立博客
D
Docker
Last Week in AI
Last Week in AI
爱范儿
爱范儿
M
MIT News - Artificial intelligence
V
V2EX
Google DeepMind News
Google DeepMind News
小众软件
小众软件
Apple Machine Learning Research
Apple Machine Learning Research
Microsoft Security Blog
Microsoft Security Blog
T
Tailwind CSS Blog
MyScale Blog
MyScale Blog
V
Visual Studio Blog
博
博客园 - 叶小钗
B
Blog RSS Feed
A
About on SuperTechFans
F
Fortinet All Blogs
T
The Blog of Author Tim Ferriss
Martin Fowler
Martin Fowler
P
Proofpoint News Feed

Hacker News - Newest: "AI"

AI can't read an investor deck AI as an attorney? Student uses ChatGPT, Gemini to sue UW over alleged racial discrimination Hacking MCP Servers in AI Systems – The Rug Pull: Tool Changes After Approval GitHub - MeepCastana/KubeezCut: Free Web based video editor Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers Coming soon: 10 Things That Matter in AI Right Now DARPA built an AI to fact-check enemy weapons claims What explains heterogeneity in AI adoption? When AI Meets Muscle: Context-Aware Electrical Stimulation Promises a New Way to Guide Human Movements - Department of Computer Science AI Changed How We Build. It Did Not Change What Matters. Linux rules on using AI-generated code - Copilot is OK, but humans must take 'full responsibility for the… Meta spins up AI version of Mark Zuckerberg to engage with employees Code Mode: Let Your AI Write Programs, Not Just Call Tools | TanStack Blog GitHub - Delavalom/graft: Go framework for building AI agents. Type-safe tools, multi-provider (OpenAI, Anthropic, Gemini, Bedrock), zero vendor SDKs. India's TCS tops estimates, says new AI models did not dent services demand Gen Z's fading AI hype Strong feeling: we are in a folded AI reality GitHub - machinarii/total-recall-catalog: A reference catalog of latest knowledge retrieval, memory & RAG systems GitHub - mensfeld/code-on-incus: Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.. Quantization, LoRA, and the 8% Problem: Benchmarking Local LLMs for Production AI Iran war: We spoke to the man making Lego-style AI videos that experts say are powerful propaganda Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks GitHub - immartian/bellamem: Persistent belief-graph memory for AI agents. Retrieves decisive context by importance — not recency, not RAG, not /compact. recursive-mode: The Repo-Native Operating System for AI Engineering After the attack on Sam Altman's home, will AI CEO's go on the offensive? The biggest advance in AI since the LLM Opus 4.6 vs GPT 5.4 One Prompt Unity World Generation Test “AI polls” are fake polls Client Challenge Can AI be a 'child of God'? Inside Anthropic's meeting with Christian leaders
AI-Native CTO Security Checklist · Tolmo
Tolmo · 2026-06-25 · via Hacker News - Newest: "AI"

Resources

The working list of what an engineering leader should ship to secure an AI-native product, by company stage. Pick your stage, each one includes everything before it. Each category maps to the Tolmo agent that automates it. Progress is saved in this browser.

Application Security

Pentesting Agent → 0/5 · 0%
  • Use version control with code review on every change Seed
  • Scan dependencies and container images for known vulnerabilities in CI Seed
  • Continuously test production for real, exploitable vulnerabilities Series A
  • Red-team agent workflows for jailbreaks and data exfiltration before launch Series B
  • Track remediation SLAs and verify every fix Series B

Cloud & infrastructure

Cloud Security Agent → 0/5 · 0%
  • Encrypt data at rest and in transit by default Seed
  • Apply least-privilege IAM and offboard promptly Seed
  • Manage infrastructure as code with policy-as-code checks in CI Series A
  • Map privilege-escalation and lateral-movement paths across accounts Series B
  • Detect drift and what changed since yesterday across cloud accounts Series C

Business logic & access

Business Logic Agent → 0/5 · 0%
  • Enforce SSO and phishing-resistant MFA on all critical systems Seed
  • Authorize every endpoint; deny by default Seed
  • Test for auth bypass, IDOR, and privilege escalation Series A
  • Gate production access behind just-in-time, audited elevation Series B
  • Review multi-step workflow-abuse and business-logic risks Series C

Attack surface

Attack Surface Agent → 0/5 · 0%
  • Keep a continuous inventory of internet-facing assets Seed
  • Remove default credentials and unused services Seed
  • Monitor domains, endpoints, and exposed services for changes Series A
  • Track shadow IT and forgotten subdomains Series B
  • Continuously map the external perimeter Series C

Sensitive data & secrets

Sensitive Data Scanner → 0/5 · 0%
  • Keep secrets out of source control; use a secrets manager Seed
  • Classify and inventory where PII lives Seed
  • Scan code, cloud storage, and pipelines for secrets and PII Series A
  • Validate leaked credentials and rotate on exposure Series B
  • Set a data-retention and PII policy for AI model inputs and outputs Series B

Monitoring & response

Security Monitoring Agent → 0/5 · 0%
  • Centralize security-relevant logs with alerting on high-risk events Seed
  • Publish a vulnerability disclosure policy and a security contact Seed
  • Ingest telemetry (Datadog, Splunk, Wiz) and triage every alert Series A
  • Monitor 0-day disclosures affecting your stack with a named owner and SLA Series B
  • Achieve SOC 2 / ISO 27001 and report security to the board Series C

Don't want to track this by hand?

Tolmo's agents check most of this list continuously, and fix what's broken.

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。