1
🔥 I’m Done Building ATLOCK Just to “Make It Work.”
ATLOCK开发者放弃堆功能，转向攻击者视角验证安全假设的硬核思考。
I want to build something actually worth using. When I started ATLOCK, the goal was simple: Build a Windows security application. But somewhere along …
2
Show HN: Code Security Skills Codex-Inspired Workflows Packaged for Claude Code
为Claude Code量身定制的13个安全工作流，覆盖威胁建模、代码审查与攻击路径分析，一键安装即用。
Article URL: https://github.com/barvhaim/code-security-skills Comments URL: https://news.ycombinator.com/item?id=49094708 Points: 1 # Comments: 0
3
Threat-Model a Connected Health Dashboard With Consent-Boundary Tests
用同意边界测试对健康仪表盘进行威胁建模，防范合法请求越过安全边界。
A health connector can be “read only” and still cross the wrong boundary. The dangerous request is not necessarily an attacker’s exploit; it can be a …
4
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation
LLM从聊天走向自主行动，安全风险剧增：本文系统梳理智能体威胁面、攻击手法与防御评估体系。
arXiv:2606.10749v1 Announce Type: cross Abstract: Large language model (LLM) agents are rapidly moving from conversational interfaces to software comp…