https://threat.cafe/blogs/2026-10-16https://threat.cafe/blogs/post/who-flagged-it-first-supply-chain-lead-times2026-10-16https://threat.cafe/blogs/post/verify-mcp-server-publisher-vendor-impersonation2026-10-16https://threat.cafe/blogs/post/valid-provenance-malicious-package-npm-trusted-publishing2026-10-16https://threat.cafe/blogs/post/slopsquatting-agent-installs-package-policy2026-10-16https://threat.cafe/blogs/post/skills-inherit-agent-access-least-privilege2026-10-16https://threat.cafe/blogs/post/skill-md-review-rubric2026-10-16https://threat.cafe/blogs/post/six-agent-security-indicators-for-cisos2026-10-16https://threat.cafe/blogs/post/shadow-ai-670k-ibm-breach-cost-how-to-cite2026-10-16https://threat.cafe/blogs/post/release-age-cooldowns-agent-installs2026-10-16https://threat.cafe/blogs/post/popular-isnt-vetted-trust-signals2026-10-16https://threat.cafe/blogs/post/owasp-agentic-top-10-asi-ast-crosswalk2026-10-16https://threat.cafe/blogs/post/osv-coverage-agent-artifacts2026-10-16https://threat.cafe/blogs/post/msp-ransomware-priorities-agent-endpoints2026-10-16https://threat.cafe/blogs/post/msp-first-90-days-agent-governance2026-10-16https://threat.cafe/blogs/post/msp-ai-agents-seven-client-questions2026-10-16https://threat.cafe/blogs/post/mcp-spec-security-musts-vendor-evidence2026-10-16https://threat.cafe/blogs/post/mcp-server-skill-reverification-cadence2026-10-16https://threat.cafe/blogs/post/mcp-registry-listing-what-it-proves2026-10-16https://threat.cafe/blogs/post/mcp-allowlist-or-denylist-policy-design2026-10-16https://threat.cafe/blogs/post/malicious-packages-are-not-vulnerabilities2026-10-16https://threat.cafe/blogs/post/malicious-mcp-server-tabletop-exercise2026-10-16https://threat.cafe/blogs/post/lethal-trifecta-agent-configuration-audit2026-10-16https://threat.cafe/blogs/post/known-bad-no-known-bad-unknown-policy-model2026-10-16https://threat.cafe/blogs/post/kev-only-edge-alert-rule-for-msps2026-10-16https://threat.cafe/blogs/post/kev-first-epss-second-prioritisation-policy2026-10-16https://threat.cafe/blogs/post/inventory-skills-mcp-servers-hooks-developer-laptops2026-10-16https://threat.cafe/blogs/post/free-threat-intel-sources-rationed2026-10-16https://threat.cafe/blogs/post/five-hook-settings-fail-open2026-10-16https://threat.cafe/blogs/post/fake-openclaw-installers-ai-search-verification-routine2026-10-16https://threat.cafe/blogs/post/egress-allowlisting-agents-ci-runners2026-10-16https://threat.cafe/blogs/post/developer-laptop-privileged-workstation-agent-era2026-10-16https://threat.cafe/blogs/post/compromised-developer-laptop-cost-model2026-10-16https://threat.cafe/blogs/post/coding-agents-optional-security-tools-50-task-test2026-10-16https://threat.cafe/blogs/post/coding-agents-managed-tenancy-personal-accounts2026-10-16https://threat.cafe/blogs/post/coding-agent-rollout-gate2026-10-16https://threat.cafe/blogs/post/clawhavoc-registry-governance-failure2026-10-16https://threat.cafe/blogs/post/claude-enterprise-skill-scanning-gaps2026-10-16https://threat.cafe/blogs/post/canary-tests-agent-hooks-mcp-allowlists2026-10-16https://threat.cafe/blogs/post/built-in-agent-protections-coverage-map2026-10-16https://threat.cafe/blogs/post/board-briefing-ai-coding-agents2026-10-16https://threat.cafe/blogs/post/axios-compromise-control-replay2026-10-16https://threat.cafe/blogs/post/auto-mode-classifier-deterministic-deny-rules2026-10-16https://threat.cafe/blogs/post/approval-prompts-not-a-control2026-10-16https://threat.cafe/blogs/post/agent-skill-scanner-disagreement-install-policy2026-10-16https://threat.cafe/blogs/post/agent-security-statistics-source-lineage-audit2026-10-16https://threat.cafe/blogs/post/agent-loss-cyber-insurance-trigger-gap2026-10-16https://threat.cafe/blogs/post/agent-installed-known-bad-package-first-hour2026-10-16https://threat.cafe/blogs/post/agent-governance-maturity-model2026-10-16https://threat.cafe/blogs/post/agent-ecosystem-incident-ledger-20262026-10-16https://threat.cafe/blogs/post/agent-decision-log-schema2026-10-16https://threat.cafe/blogs/post/agent-check-placement-hook-wrapper-gateway-registry2026-10-16https://threat.cafe/blogs/post/after-nvd-triage-free-cve-prioritisation-rebuild2026-10-16https://threat.cafe/blogs/author/constance-ibe-whitmore-15https://threat.cafe/blogs/author/desmond-okafor-hale-14https://threat.cafe/blogs/author/margot-reyes-15https://threat.cafe/blogs/author/nadia-ferreira-strand-15https://threat.cafe/blogs/author/priya-venkatraman-14https://threat.cafe/blogs/author/solene-beaumont-adjei-10https://threat.cafe/blogs/author/tobias-lindqvist-rao-10https://threat.cafe/blogs/author/whit-calloway-7