The Lab · Written in the open · Tagged Security

Lab.

Working notes from the studio. The tools I build, the workflows I keep, the mistakes I paid for.

9 entries · latest 2026-09-04

Latest entry

RAXXO Studios 2026-09-04 15 min read

OpenAI Made Astra Harder to Watch and Shipped It

GPT-6 Astra is the first model OpenAI rates Critical for cyber. It also monitors worse than the model it replaces, and OpenAI published that itself.

Latest entry · AI Tools

All entries · Security

2026-07-28 9 min read

A missing noindex tag let shared Claude conversations and Artifacts turn up in Google and Bing search results…

2026-07-24 9 min read

Anthropic shipped Claude Security in beta, a multi-agent scanner that turns vulnerability findings into reviewed patches inside Claude…

2026-05-27 8 min read

Claude Security left its launch behind with scheduled scans, directory targeting, and CSV or Markdown exports.

2026-05-04 8 min read

Claude Security entered public beta on May 2026, scanning repos and explaining vulnerabilities for Claude Enterprise customers only

2026-04-12 8 min read

Shopify now requires expiring offline access tokens for all new public apps as of April 1

2026-04-12 8 min read

Attacker opened 475+ malicious PRs across GitHub in 26 hours using AI-generated payloads

2026-04-08 10 min read

Project Glasswing uses Claude Mythos Preview to find zero-days in critical infrastructure. 12 partners, 100M USD in credits,…

2026-04-05 11 min read

Three versions of anti-cheat for a CSS centering game with 3,000+ attempts. HMAC tokens, pattern analysis, and HTTP…