[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

operational guidance (based on Huntress recommendations, Nov 10, 2026)

Tip: make ClickFix harder by blocking execution from user-writable folders and watching what the Run dialog launches

  • On Windows, a GPO can remove the Run dialog for standard users, and WDAC or AppLocker rules can deny execution from %LOCALAPPDATA%\Temp and %PROGRAMDATA% subfolders that aren't on an allowlist.
  • Pair the controls with an easy report path so users who did paste something tell IT fast.

Sources: Huntress: Beyond the clipboard: The evolving tradecraft of ClickFix (Nov 10, 2026)