Security briefs
Security briefs for teams that run AI coding agents and LLM gateways
Something broke in a tool your team runs. Now what? You need three answers: what happened, whether you were affected and what to check today. Each brief gives them in that order, names every source with its date, and is updated on the same address when the facts change.
Can a file in my Downloads folder hijack Codex or Claude Code?
A web page can drop an AGENTS.md into ~/Downloads and an agent started there may obey it. What Forever Security tested, what was not tested and what to check.
Was my team affected by the LiteLLM 1.107.0 supply chain attack?
A poisoned LiteLLM release ran a credential stealer on every Python start for about two hours on 21 October 2026. Who is affected and what to rotate.
Did AI agents really breach more than 100 company websites for $50 each?
One operator pointed AI agents at more than 1,200 shops from 25 September and Reuters reported breaches at 100+ companies. What is confirmed and what to check.
Building something that has to hold up in production?
Start with a free 25-minute scoping call. If it fits, the first paid step is a production review: five working days on your real repository, scored against ten layers, with a costed fix list.
Book a 25-minute scoping call