avday 
PHP2Shell: the critical PHP flaws, and how to patch them
Two critical flaws in PHP itself, found with help from AI, were patched on 21 October. Which versions fix them, and what to do if you can't update yet.
Tag
#ai-security
2 articles
Claude Code permissions: a tested setup to lock down your agent
We tested Claude Code deny rules and the sandbox in a throwaway repo. The settings file that kept our agent out of .env, ~/.ssh and our monitoring code.