[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

tip (based on CISA KEV and Apple advisories)

Tip: today's Apple KEV entry is a 2024 bug, so the risk is the old iPhones and Macs your MDM stopped tracking

  • MDM query: list devices below iOS 16.7.8 (on 16.x), below iOS 17.5 (on 17.x), below macOS 14.5 (Sonoma), and Monterey or Ventura Macs with Safari older than 17.5.
  • Enforce: set a minimum OS version in conditional access so outdated devices can't get SSO or mail tokens. That covers unmanaged phones MDM can't patch.
  • At-risk staff: if a journalist's, executive's or Ukraine-linked staffer's old iPhone browsed widely, revoke its web sessions (the Sekoia chain targeted Safari cookies).

Sources: CISA KEV catalog · Apple: iOS 16.7.8 security content · Sekoia: Poisoned Source