1
Suspecting court of using AI, man injected prompts in filings to try to win case
专治AI被"下蛊"的注入攻击检测器！自动模拟恶意指令轰炸AI系统，扫描越狱漏洞生成防御报告，防止被套路
Judge warns pro se litigants are using chatbots wrong and getting desperate.
2
Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
伪装成AI爬虫的大规模漏洞扫描正在激增，机器流量正重塑互联网安全格局。
Article URL: https://knownagents.com/insights Comments URL: https://news.ycombinator.com/item?id=49272569 Points: 278 # Comments: 206
3
Show HN: AI Agent Audit for Free
免费开源的AI Agent安全审计工具，帮你扫描漏洞、守护代理安全，开发者必备。
Article URL: https://github.com/sinewaveai/agent-security-scanner-mcp Comments URL: https://news.ycombinator.com/item?id=48870646 Points: 1 # Comments…
4
Ask HN: Are there good security benchmarks for LLMs?
想给LLM找安全基准？来看看HN上的实战讨论，聚焦Agent全仓库扫描场景，附参考项目，适合刚入坑基准测试的人。
I'm looking for this myself but figured it's good to have an actual discussion about this. I'm pretty new to the benchmarking side of LLMs. For exampl…
5
Show HN: Diplomat-agent scan Python MCP servers for unguarded tool calls
开源安全扫描器，专查Python MCP服务器未防护的工具调用漏洞。
Article URL: https://github.com/Diplomat-ai/diplomat-agent Comments URL: https://news.ycombinator.com/item?id=48672444 Points: 2 # Comments: 0
6
Show HN: CommitGate – Automatically scan your commit for vulnerabilities
提交代码前自动扫描漏洞，守护 Git 仓库安全，开源轻量易上手。
Hello HN! I built a pre-commit code scanner that checks your staged changes for security vulnerabilities every time you run 'git commit'. I am an inex…
7
Show HN: Muninn - 8 Security scanners in one GitHub Action
集8大安全扫描器于一身，GitHub Action一键集成，统一输出漏洞报告，开源利器守护CI/CD安全。
Article URL: https://github.com/skaldlab/muninn Comments URL: https://news.ycombinator.com/item?id=48605644 Points: 1 # Comments: 0
8
AICU – LLM Red Team Vulnerability Scanner
专为LLM设计的红队漏洞扫描工具，帮你发现大模型安全隐患。
Article URL: https://github.com/Jake-Schoellkopf/aicu Comments URL: https://news.ycombinator.com/item?id=48589149 Points: 1 # Comments: 0
9
Ask HN: How to get access to GPT cyber or glasswing as a solo dev?
个人开发者如何获取GPT cyber/glasswing等前沿AI安全工具的访问权限？探讨攻击模拟与反滥用困境。
Obviously, frontier labs want to prevent misuse, but as admin and/or dev, you also want to simulate an attack, because attackers will do just that. I …
10
Show HN: Hookwarden – npx tool to find and fix webhook HMAC bugs (JS/TS/Py/PHP)
开源的命令行工具，自动扫描并修复Webhook HMAC签名漏洞，已验证45个流行项目，支持JS/TS/Py/PHP。
Article URL: https://github.com/Hookwarden/hookwarden Comments URL: https://news.ycombinator.com/item?id=48256666 Points: 1 # Comments: 0
11
Unity’s AI agent went public: the developers of a static analysis tool on what that means for code quality
PVS-Studio深度整合Unity脚本特性，用20+专属规则精准揪出代码隐患，让游戏开发更稳更快。
In early May, Unity opened its built-in Unity Agent to all users. It runs in two modes. In chat mode, the AI assistant suggests improvements to game m…