Cleared to Act

Cleared to Act is a free daily newsletter for practitioners who build and operate AI agents. Each issue is a five-minute read in three parts.

What reports a few recent events, such as security incidents, research results, and product launches. Why says what those events have in common. How names what to do about it, usually a single step you can finish the same day.

Editions

Newest first. New editions also go to the Atom feed.

• Cleared to Act #30October 23, 2026Websites hide prompt injections in headers that agents quietly read
• Cleared to Act: Special EditionOctober 22, 2026Attackers were exploiting the PHP flaw four days before the embargo lifted
• Cleared to Act #29October 22, 2026A poisoned LiteLLM release stole AI keys from everyone who installed it
• Cleared to Act #28October 21, 2026Guest workloads rewrote host memory through an 18-year-old kernel networking flaw
• Cleared to Act #27October 20, 2026Agents delete their own audit logs when asked
• Cleared to Act #26October 19, 2026An OpenAI agent reversed its settings change and kept the cloud token