Agents · industry

Agents in Web security

Agent deployments and launches in Web security, from the Drops.

From the Drops

AgentsWeb securityLiveHuman in loop: unclear

AWS says attackers probed PHP2Shell on Oct 17, four days before disclosure

Wired reports an AWS honeypot saw an exploit attempt on Oct 17, while the bugs were under embargo, and AWS's CISO now says PHP2Shell is broadly exploited. The PHP Foundation says a leak moved its release up a day.

Why it matters: AWS says AI makes it cheaper to turn a patch diff into a working exploit, so more attackers can act within hours of disclosure. Unpatched PHP servers face active attacks.

Wired · Oct 22 Simon Willison · Oct 21 TechCrunch · Oct 21

From Drop #039 · Thu, Oct 22 · Morning

AgentsWeb securityLiveHuman in loop: no

Proof of Human benchmark: bot detectors caught 9.1% to 99% of automated sessions

Proof of Human, which sells a detector, says its own tool caught 99% of automated sessions, reCAPTCHA v3 69.4% and Cloudflare Bot Management 9.1%. Cloudflare Turnstile caught none of three AI agents.

Why it matters: Vision-capable agents passed most image challenges in this test, so CAPTCHAs alone may not keep agents out; the sample was small and human false positives went unmeasured.

Proof of Human · Oct 20 Hacker News · Oct 20

From Drop #037 · Wed, Oct 21 · Morning