AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser - and the default config has auth turned off.
k8s-employee-api/ ├── api/ │ ├── main.py # App entry point, health route, router registration │ ├── routers/ │ │ └── employees.py # HTTP layer — routes, status codes, HTTP exceptions │ ├── services ...
Последнее время я всё чаще встречаю одну и ту же мысль: бизнес никогда не даст ИИ-агенту доступ к базе клиентов, заявкам, платежам, CRM или ...
What's new in v0.1.3 — the first signed release. Agent binaries ship with minisign-signed checksums that the install script verifies against a pinned public key (fail-closed with ...