October 6, 2026

The Cryptographic Context Injection attack hides the instructions in an encrypted text that the agent decrypts in its shell.

The same instructions sent in clear text are detected as prompt injection and refused.

The model mai-code-1.1-flash executed the whole chain in 50% of Adversa's trials, two GPT-5.6 models refused.

GitHub's bug bounty validated the finding but refused to handle it as a vulnerability.

Three access levels are offered: Defense Access, Red Team Access and Specialized Access.

Each level gives access to Claude Opus 5.5, Claude Sonnet 5.5 and Claude Mythos 5.1.

On CyScenarioBench, 46 of the 50 tests were blocked at some point at the Defense Access level.

At the Red Team Access level, no blocking took place and Claude Opus 5.5 succeeded in 34 of the 50 tasks.

Of 7,959 sites sending a header meant for AI, 30 try to give orders to an agent, 22 of them as a joke.

The analysis covers 217,097,223 responses, or 10% of the September 2026 Common Crawl crawl.

In Claude Code, Claude models ignore the test header unless the prompt gives authority to the site.

With a prompt giving authority to the site, 7 out of 9 runs obeyed the header.

At Comcast, a critical authentication vulnerability was found on a publicly exposed platform.

Comcast's assessment covered 258 critical systems and about 170 million lines of code.

At Booz Allen, the model was used to spot weaknesses that could be chained into exploit chains.

A Booz Allen analyst examined eight production systems across 138 repositories in twelve days.

Measures are presented to defend identities, pipelines and cloud infrastructure.

The post is titled "Beyond source code: A path to the keys to the kingdom".

The post is announced as a 4-minute read.