--- title: "#security articles | Hashnode" description: "All about security. Read the latest #security articles and tutorials on Hashnode." url: "https://hashnode.com/tag/security" --- Tag # #security 14,376 posts · 2,311 followers [Andrey Lesnikov](https://hashnode.com/@justrunme) · [5h ago](https://hashnode.com/posts/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it/6af6ec76f8d8584368c29d20) ### [Fail-closed authorization for AI agent tool calls, and the audit record behind it](https://justrunme.hashnode.dev/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it?utm_source=hashnode&utm_medium=feed) Platform teams already enforce fail-safe defaults for Kubernetes objects with RBAC and admission controllers such as OPA/Gatekeeper and Kyverno. My preprint, Fail-Closed Authorization for Tool-Using A 7 min read · [justrunme.hashnode.dev](https://justrunme.hashnode.dev/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it?utm_source=hashnode&utm_medium=feed) [4](https://hashnode.com/posts/fail-closed-authorization-for-ai-agent-tool-calls-and-the-audit-record-behind-it/6af6ec76f8d8584368c29d20) [Anders Revsgaard](https://hashnode.com/@anders-revsgaard) · [1m ago](https://hashnode.com/posts/swedish-municipalities-saml-openid-connect/6af73dd97020ea4775a49d23) ### [Connecting an OpenID Connect application to Swedish municipalities' SAML 2.0 identity providers](https://anders-revsgaard.hashnode.dev/swedish-municipalities-saml-openid-connect?utm_source=hashnode&utm_medium=feed) Connect an OpenID Connect application to Swedish municipalities' SAML 2.0 identity providers with FoxIDs, including metadata, claims and testing. 8 min read · [anders-revsgaard.hashnode.dev](https://anders-revsgaard.hashnode.dev/swedish-municipalities-saml-openid-connect?utm_source=hashnode&utm_medium=feed) [Noah Grinstein](https://hashnode.com/@noahcontrolplane) · [3m ago](https://hashnode.com/posts/hybrid-cloud-security-and-compliance-risks-a-risk-register-and-how-to-mitigate-each-one/6af73d2d16c7ef4537133c1f) ### [Hybrid Cloud Security and Compliance Risks: A Risk Register and How to Mitigate Each One](https://controlplane-eng.hashnode.dev/hybrid-cloud-security-and-compliance-risks-a-risk-register-and-how-to-mitigate-each-one?utm_source=hashnode&utm_medium=feed) Hybrid cloud security and compliance risks in one risk register: what makes each risk unique to hybrid, and how to mitigate it. 17 min read · [controlplane-eng.hashnode.dev](https://controlplane-eng.hashnode.dev/hybrid-cloud-security-and-compliance-risks-a-risk-register-and-how-to-mitigate-each-one?utm_source=hashnode&utm_medium=feed) [香蕉痞 Yang](https://hashnode.com/@yt1988) · [15m ago](https://hashnode.com/posts/your-vpn-changed-your-ip-here-is-what-it-didn-t-change/6af73a57912b02df8893bbaa) ### [Your VPN changed your IP. Here is what it didn't change.](https://1ms-notes.hashnode.dev/your-vpn-changed-your-ip-here-is-what-it-didn-t-change?utm_source=hashnode&utm_medium=feed) Disclosure: I'm Yang, and I made the tool mentioned at the end (who.1ms.dog, source under MIT at github.com/yt1988/who-are-you). I used AI help to tidy up the English; the content and the replies are 4 min read · [1ms-notes.hashnode.dev](https://1ms-notes.hashnode.dev/your-vpn-changed-your-ip-here-is-what-it-didn-t-change?utm_source=hashnode&utm_medium=feed) [Mahmoud Daghash](https://hashnode.com/@mahmouddaghash) · [29m ago](https://hashnode.com/posts/how-to-protect-sensitive-pdf-documents-before-sharing-them/6af73743bc87d8b305316dbd) ### [How to Protect Sensitive PDF Documents Before Sharing Them](https://confileo-eng.hashnode.dev/how-to-protect-sensitive-pdf-documents-before-sharing-them?utm_source=hashnode&utm_medium=feed) A PDF can leak in four different ways, and each one has a different fix. A password stops a stranger from opening the file. It does nothing about a bank account number that should never have been in t 5 min read · [confileo-eng.hashnode.dev](https://confileo-eng.hashnode.dev/how-to-protect-sensitive-pdf-documents-before-sharing-them?utm_source=hashnode&utm_medium=feed) [Bitflash](https://hashnode.com/@bitflash) · [38m ago](https://hashnode.com/posts/what-auditing-a-bitcoin-0-1-0-fork-in-2026-turned-up/6af7351a5584757c61feddd3) ### [What auditing a Bitcoin 0.1.0 fork in 2026 turned up](https://bitflash.hashnode.dev/what-auditing-a-bitcoin-0-1-0-fork-in-2026-turned-up?utm_source=hashnode&utm_medium=feed) Static analysis, three fuzzers, sanitizers and reproducible builds, and the four findings worth sharing. 3 min read · [bitflash.hashnode.dev](https://bitflash.hashnode.dev/what-auditing-a-bitcoin-0-1-0-fork-in-2026-turned-up?utm_source=hashnode&utm_medium=feed) [Piyush Sahoo](https://hashnode.com/@piyuzz) · [41m ago](https://hashnode.com/posts/what-is-number-masking/6af73468b113c35d1889631f) ### [What Is Number Masking? A Guide to Call Masking](https://piyuzz.hashnode.dev/what-is-number-masking?utm_source=hashnode&utm_medium=feed) How a proxy number connects two people, how many numbers you need, and the telecom and privacy rules that apply 16 min read · [piyuzz.hashnode.dev](https://piyuzz.hashnode.dev/what-is-number-masking?utm_source=hashnode&utm_medium=feed) [HackerMe](https://hashnode.com/@hackerme) · [58m ago](https://hashnode.com/posts/web-hosting-ransomware-what-three-host-attacks-teach-site-owners-about-backups/6af730758d3338c7e67e0552) ### [Web Hosting Ransomware: What Three Host Attacks Teach Site Owners About Backups](https://hackerme.hashnode.dev/web-hosting-ransomware-what-three-host-attacks-teach-site-owners-about-backups?utm_source=hashnode&utm_medium=feed) Web hosting ransomware used to be a story about one customer's server. In the first half of November 2026 it became a story about the host itself. Three hosting providers, Beget and ESTT in Russia and 5 min read · [hackerme.hashnode.dev](https://hackerme.hashnode.dev/web-hosting-ransomware-what-three-host-attacks-teach-site-owners-about-backups?utm_source=hashnode&utm_medium=feed) [Sunny Chokshi](https://hashnode.com/@sunnychokshi) · [1h ago](https://hashnode.com/posts/llm-benchmark-stimulus-audit-33-of-80-pairs-not-clean/6af72a3eaeb41c351252eed2) ### [LLM benchmark stimulus audit: 33 of 80 pairs not clean](https://sunnychokshi.hashnode.dev/llm-benchmark-stimulus-audit-33-of-80-pairs-not-clean?utm_source=hashnode&utm_medium=feed) Sunny Chokshi. November 6, 2026. After my runs finished I did an LLM benchmark stimulus audit on my own matched pairs. Of the 80 pairs that have both a plain and an indirect form, 33 differ in more t 5 min read · [sunnychokshi.hashnode.dev](https://sunnychokshi.hashnode.dev/llm-benchmark-stimulus-audit-33-of-80-pairs-not-clean?utm_source=hashnode&utm_medium=feed) [Sunny Chokshi](https://hashnode.com/@sunnychokshi) · [1h ago](https://hashnode.com/posts/adversarial-code-comments-dataset-for-llm-reviewers/6af729f992d9e1c1e448eb59) ### [Adversarial code comments dataset for LLM reviewers](https://sunnychokshi.hashnode.dev/adversarial-code-comments-dataset-for-llm-reviewers?utm_source=hashnode&utm_medium=feed) Sunny Chokshi. November 4, 2026. I wanted to know whether a comment can change what an LLM code reviewer says about the same code. So I built a small adversarial code comments dataset, CommentInject. 3 min read · [sunnychokshi.hashnode.dev](https://sunnychokshi.hashnode.dev/adversarial-code-comments-dataset-for-llm-reviewers?utm_source=hashnode&utm_medium=feed)