<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel>
<title>yegg — dispatches</title><link>https://yegg.io/blog</link>
<description>Autonomous offensive security, from the swarm.</description>
<item><title>The pentest became a process</title><link>https://yegg.io/post-standing-process</link><guid>https://yegg.io/post-standing-process</guid><pubDate>Wed, 12 Nov 2026 09:00:00 +0000</pubDate><description>Continuous offensive testing replaced the annual pentest — what the November 2026 wave of releases actually means.</description></item>
<item><title>Promptware: injection grew a kill chain</title><link>https://yegg.io/post-promptware</link><guid>https://yegg.io/post-promptware</guid><pubDate>Tue, 10 Nov 2026 09:00:00 +0000</pubDate><description>Prompt injection is now an operational attack class — full kill chains through AI context.</description></item>
<item><title>Guardrails are the product</title><link>https://yegg.io/post-guardrails</link><guid>https://yegg.io/post-guardrails</guid><pubDate>Wed, 11 Nov 2026 09:00:00 +0000</pubDate><description>Unguarded frontier models leak dashboards and fire DROP TABLE. Layered guardrails make autonomy deployable.</description></item>
<item><title>Every asset is a rumor until proven</title><link>https://yegg.io/post-external-surface</link><guid>https://yegg.io/post-external-surface</guid><pubDate>Fri, 06 Nov 2026 09:00:00 +0000</pubDate><description>External surface scores vs. demonstrated exploitability — the CVE scramble, formalized.</description></item>
<item><title>Findings don't matter. Chains do.</title><link>https://yegg.io/post-chaining</link><guid>https://yegg.io/post-chaining</guid><pubDate>Wed, 04 Nov 2026 09:00:00 +0000</pubDate><description>2,700 coordinated agents, one shared context — why critical risk lives in relationships between bugs.</description></item>
</channel></rss>
