Join my community / free newsletter — sign up here

workflow security

By Greg Nowak, 13 August, 2026

Your AI Agent Has Shell Access. What Can It Reach?

A practical guide to mapping what a shell-enabled AI agent can reach, then containing its access to files, credentials, networks, tools, and high-impact actions.

Tags

Review Greg on Google

Your AI Agent Has Shell Access. What Can It Reach?

2026-08-13

A practical guide to mapping what a shell-enabled AI agent can reach, then containing its access to files, credentials, networks, tools, and high-impact actions.

Cloudflare Changed DoH JSON. What Else Is Parsing DNS as Text?

2026-08-12

Cloudflare’s DoH JSON change exposes brittle DNS parsing. Find affected scripts, test both formats, and choose a safer integration contract.

Your Website Can Answer Questions Now. Should It?

2026-08-11

NLWeb makes conversational website search practical to deploy. The real question is whether your content, users and team are ready to support it.

AI Search Finally Has Reports. Now Connect Visibility to Revenue

2026-08-11

Google and Bing now expose first-party AI search data. The real task is connecting citations and impressions to analytics, CRM outcomes, and revenue.

The Bot Passed Your CAPTCHA. What Did It Do Next?

2026-08-11

Passing a challenge is only one signal. Session analysis, server-side validation and endpoint-specific controls help reduce bot abuse without blocking customers.

WordPress 7.1 Moves Image Work Into the Browser—Test Every Media Hook

2026-08-11

WordPress 7.1 shifts image processing into supported browsers. Here is what to test across hooks, CDNs, formats, security headers, and fallbacks.

Prompt Caches Have Write Costs Now—Audit What Your Workflow Reuses

2026-08-10

GPT-5.6 makes cache writes billable. See how to spot wasted writes, stabilise prompt prefixes, place breakpoints and measure whether caching pays.

The AI Crawler in Your Logs May Be Wearing a Borrowed Name

2026-08-09

A User-Agent is a claim, not proof. See how to verify AI crawler traffic before it shapes reporting, robots.txt decisions, or WAF exceptions.

AI Agents Need a Spending Brake, Not Just a Billing Dashboard

2026-08-08

AI agent costs can climb inside a single workflow. Runtime budgets, loop detection, outcome metrics, and safe handoffs keep that spending under control.

Drupal 12 Slipped to December. Drupal 10 Still Runs Out of Road

2026-08-07

Drupal 12 arrives as Drupal 10 support ends in December 2026. Moving to Drupal 11.3+ first keeps two mandatory upgrades manageable.