[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

guide (based on the DOJ and FBI FaceStealer disclosures, Nov 12, 2026)

No real video call needs you to install a 'fix': verify invites out of band and hang up on audio-error prompts

  • Confirm unexpected meeting invites through a different channel than the one they arrived on, even from people you know.
  • Only join meetings in the vendor's installed app or its real domain; never install software or paste commands offered mid-call to fix audio or video.
  • Maintainers: use hardware-key MFA on repo accounts and keep publishing credentials off the machine you take calls on.

Sources: DOJ: Justice Department Announces Actions to Disrupt North Korea's Massive Theft of Cryptocurrency (Nov 12, 2026) · FBI: FaceStealer Cryptocurrency Theft Scheme