The agentic rag, wrung out.
SecurityThursday, October 22, 2026
Agent Blackbox is now in the official Hermes plugin catalog. It checks tool calls against a threat graph (Origin Trail DKG). Audit mode logs; block mode can refuse risky calls.
One-install path to runtime tool-call scrutiny. Relevant for anyone running agents with elevated tool access.
SecurityOct 17
OpenClaw completed a Trail of Bits security audit and continues to publish advisories publicly (unlike many agent products). Recent high-severity CVEs include tool policy bypasses in the npm package and TLS pin failures in the iOS Control UI.
SecurityOct 17
The NVIDIA App 11.0.9 update adds a local MCP server that allows agents (Hermes, OpenClaw, etc.) to control games, settings, and ShadowPlay. Many users found the toggle already enabled after the auto-update.
SecurityOct 11
VulnCheck published a CVE on a third-party dashboard (9router) that allows authenticated users to inject arbitrary keys into Hermes config.yaml via a settings endpoint. Demonstrated path: set hooks_auto_accept and a shell command that then runs after LLM calls with no further approval. The underlying condition is “write access to Hermes config = ability to disable approval gates.”
Never miss a night
One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.
