Supply-Chain

New findings spanning LLM cache poisoning, npm prototype pollution, and kernel compartmentalization with PKS.

Misconfigured email auto-configuration globally, manipulating GitHub contribution histories to infiltrate supply chains, and adversarial Android malware factories.

New perspectives on LLM agent security: a census of the Model Context Protocol ecosystem, attacks via gated memories and contextual bias, new attacks on agent architectures, and LLM-guided smart contract fuzzing.