A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
Website: https://theattacksurface.blog/
Research posts from Redwood Research on catastrophic AI risk, focused on AI control, monitoring of agentic models, and red-teaming of safety systems. Readers get technical write-ups of papers, experiments and engagements with AI developers, including methods, results and open questions.
A security leader's newsletter on AI agent security, introducing a framework called Wingbeat Radius for measuring how far untrusted input can travel through AI agents. It analyzes real incidents such as the Cline supply chain compromise and an AI sandbox escape, and covers published vendor controls for limiting agent reach.
Analysis of AI agent security, cost and compliance, drawing on benchmarks, industry data and the author's experience building and securing agent platforms. Each issue argues a specific position, such as treating tool surfaces as dependency trees or the context window as a budget.
A practitioner's blog covering hands-on cybersecurity engineering, including secrets management for developers and detection engineering for Claude Enterprise and agentic AI. Posts are multi-part tutorials with working setups, trade-off discussion and references to open-source tools by the author.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
