Stack layer / Threat pattern
DSPy adds LocalInterpreter, a persistent CPython worker that the release notes explicitly refuse to call a sandbox
GitHub
Stack layer / Contrast
Reconstructing Facts From Feed-Forward Residual Vectors Answers Single-Fact Questions in Two-Million-Token Contexts
arXiv 2609.12686
Policy dependency / Stack layer
RIPPLE: an edit confined to one prompt-policy segment changes downstream behavior, so replay candidate edits after previously accepted ones before persisting
arXiv 2609.12127
Policy dependency / Stack layer
A replay of 68,266 real Claude Code requests says plain LRU beats the clever KV-cache policies
GitHub
Stack layer / Follow-up thread
Two More Safety Researchers Quit Anthropic and Google DeepMind for METR, Citing the July Hugging Face Agent Attack
NBC News
Stack layer / Threat pattern
Elva Launches Against Postman With Flat Workspace Pricing and Specs Generated From Repo Commits
Elva (surfaced via the Product Hunt daily leaderboard for 2026-09-14)
Stack layer
A Jailbreak SoK Finds Low Final-Response Attack Success Hides Compromised Planning, Memory, and Tool State
arXiv 2609.12413
Policy dependency / Stack layer
SGLang Hit With Unauthenticated Pickle RCE via /update_weights_from_tensor, the Fourth Critical Inference-Stack CVE in Four Weeks
CERT Coordination Center