Kulendzaba
Sesijwayele kufundza nge-AI ekuvikelekeni kwe-inthanethi ngalokunye kuphela: umhlaseli losebentisa ema-agent kute ahambe ngekushesha. Lokwesibili kubaluleke kakhulu enhlanganweni yakho kodvwa kunakwa kancane kakhulu. I-agent loyisebentisa emshinini wakho welonjiniyela iyindzawo lensha yekuhlasela ngekwayo. Etinyangeni letimbili, emacembu lamatsatfu ekucwaninga latimele ashicilele lokutfoliwe konkhe lokukhomba endleleni yinye.
Loku lokufanako kulamacala akusiso siphambeko se-model noma imphendvulo lembi. I-agent ayizange iphume ku-sandbox yayo futsi ayizange yephule umtsetfo. Lokwenteka kutsi i-agent yafundza noma yabhala lifayela ngekhatsi kwephrojekthi, base kutsi lithulusi lelitsenjwako lelisebenta ngaphandle kwe-sandbox lasebentisa lokucuketfwe ngulelo fayela. I-sandbox yema. Kungenwa kwayizungeza.
Indlela lesebenta ngayo: lilungiselelo le-Git lekusebenta kahle lelineminyaka
Sibonelo lesicace kakhulu sashicilelwa yi-Manifold Security mhla ti-2 Inyoni 2026 ngeligama lekutsi GitSpawn. Sincike kulilungiselelo le-Git lelisezingeni lephrojekthi lelibitwa ngekutsi core.fsmonitor, lokukhetsa lokusemtsetfweni nalokubhaliwe kwekusebenta kahle lelinanani lako lingumyalo i-Git lewusebentisako kute ibone ngekushesha emafayela lashintjile esikhundleni sekuskena yonkhe i-directory.
Nyalo hlanganisa tingcenye letimbili:
- I-AI coding agent, uma icala kusebenta ephrojekthini, isebentisa ngekwayo imiyalo ye-Git lefana ne-git status ne-git diff kute icondze simo se-repository. Lokuhamba lokujwayelekile futsi lokudzingekako.
- Uma i-repository inenani le-core.fsmonitor lelinebubi, kusebentisa nje leyo miyalo kusebentisa umyalo wemhlaseli.
Umphumela kutsi kuvula i-repository yekhodi akusesiso sehlakalo sekufundza kodvwa siba sehlakalo sekusebentisa. Akukho kuchofoza, akukho kuvuma, akukho siyalo lesiboniswa lonjiniyela. Ngekusho kwalombiko, ema-agent lasiphohlongo emugca wemiyalo abesengotini, futsi ema-patch alandzela kumanyenti awo: i-goose ku-1.44.0, i-Claude Code ku-2.1.196 endleleni ye-core.fsmonitor, i-Codex CLI ku-0.131.0, kanye ne-Cursor. Umbiko waphawula kutsi tindlela letine betisengakavalwa ngema-patch ngesikhatsi sekushicilelwa. Loluhlobo lwalandzelelwa ngetinombolo tekuhlonta letifaka ekhatsi i-CVE-2026-72718, i-CVE-2026-19592 ne-CVE-2026-55607.
Akusiso sehlakalo sinye kodvwa luhlobo lonkhe
Emavikini lasitfupha ngembi kwe-GitSpawn, bacwaningi base-Pillar Security bashicilela mhla ti-20 Kholwane 2026 luchungechunge labalubita ngekutsi liviki lekuphunyuka ku-sandbox, babhala butsakatsaka lobulikhomba kuma-coding agent lamane lavela kubatsengisi labatsatfu: i-Cursor, i-Codex, i-Gemini CLI ne-Antigravity. Inchazelo yabo yendlela lesebenta ngayo ifanele kufundvwa kabili. I-agent ihlala ngekhatsi kwelibhokisi futsi ilandzela yonkhe imitsetfo. Ibhala nje lifayela lelitsi lithulusi lelitsenjwako langaphandle kwelibhokisi ngemuva kwesikhashana lilisebentise, lililayishe noma liliskene.
- Ku-Cursor, lifayela lekuhlela ema-hook lelilawulwa yi-workspace lavumela kusebentisa ngaphandle kwe-sandbox, lalandzelelwa njenge-CVE-2026-48124 futsi lalungiswa ku-version 3.0.0.
- Ku-Codex CLI, luhlu lwemiyalo levunyelwe beluyetsemba i-git show ngeligama layo kuphela, nanoma ema-parameter layinikwako angayenta kutsi yente lokungetulu kwekufundza kuphela. Kwalungiswa ku-version 0.95.0.
- Inkinga ye-Docker socket yatsintsa i-Codex, i-Cursor ne-Gemini CLI ngesikhatsi sinye.
- Ku-Antigravity, kwedlula luhlu lwekwala lwe-macOS Seatbelt nenkinga yekuhlela imisebenti ye-editor, lokubili lokwahlelwa yi-Google njengalokulukhuni kusetjentiswa ngebubi.
Base kutsi mhla ti-10 Inyoni 2026, i-Upstarts Media yabika kuvetwa kwesitsatfu, kusuka ku-startup lebitwa ngekutsi Accomplish, lokumayelana nema-sandbox laputsako ku-Claude Code, i-Codex ne-Cursor. Inombolo lehehako lapho akusibo butsakatsaka kodvwa sikhatsi sekulungisa: inkinga ye-Cursor yaxazululwa cishe ngeliviki linye, tinkinga letimbili te-OpenAI nga-Ingci, kantsi inkinga ye-Anthropic yatsatsa cishe emalanga langemashumi lasihlanu kuyo yonkhe ema-release lamanyenti. Emacembu lamatsatfu ekucwaninga, imibiko lemitsatfu, tinyanga letimbili, iphethini yinye.
Kungani loku kubalulekile nanoma ungakaze ubhale ikhodi
Ngobe lengoti ayiweli ku-agent. Iwela emshinini loyisebentisako nakunethiwekhi lowo mshini lokuyo. I-workstation yelonjiniyela ingulesinye setisetjentiswa letinemalungelo lamakhulu kunoma nguyiphi inkampani: igcina ema-key ekungena kuma-server, ema-token ekufaka i-software, futsi kanyenti kuchumana lokuvulekile ne-database yekukhicita. Kusebentisa umyalo munye kuyo akusiso sehlakalo lesincane.
Lesimo akusiyo inkholelo nje emakethe yaseSaudi. Hlola lamacala nenkampani yakho:
- Likhontrakta langaphandle noma i-ejensi yekwakha iletsa ikhodi leyo licembu lakho bese liyivula nge-AI agent emshinini lose-nethiwekhi yakho.
- Iphrojekthi ye-open source lonjiniyela layidawunilodako kute azame umtapo noma kulungisa lokusheshako.
- Lifayela lelitfunyelwe nge-imeyili noma nge-WhatsApp kusuka kumphakeli, lelivulwa ku-zip bese livulwa ngco ku-editor.
- Umuntfu lofaka sicelo semsebenti latfumela sibonelo sephrojekthi lesivulwa ngumbuyeketi wetheknoloji.
- I-branch lendzala noma i-repository ledluliselwe leniketwa ngesikhatsi sekutsengwa kwenkampani noma kudluliswa kwephrojekthi.
Kuwo onkhe lamacala, umcabango longashiwo kutsi kuvula emafayela kute uwafundze kuyintfo lephephile. Ngulowo mcabango lowephukile.
Lokufanele kwentiwe kuleliviki
Tinyatselo letisihlanu, futsi sekucala asidzingi sabelomali:
- Vuselela emathulusi e-agent kulo lonkhe licembu lamuhla. Ema-patch akhona kumanyenti alamathulusi, futsi inzuzo isekutsini wonkhe umuntfu usebentisa i-version lenema-patch, hhayi umuntfu munye. Cala ngekwati kutsi ngubani losebentisa yini futsi ku-version yini, ngobe loluhlu ngekwalo kanyenti alukho.
- Phatsa ikhodi lengenako njengalokucuketfwe lokungatsenjwa. Ikhodi levela kulikhontrakta noma emtfombeni lovulekile akusilo libhuku lolifundzako, yintfo lesebentako. Yivule kwekucala emshinini noma ku-container lehlukaniswe nenethiwekhi yemsebenti.
- Hlukanisa umshini wekwakha kuma-key ekukhicita. Ungagcini ema-token ema-server lasebentako emshinini lapho kuvulwa khona emaphrojekthi lavela ngaphandle. Kulahlekelwa ke kuhlala kuleso sisetjentiswa.
- Dlulisa kufakwa kwe-software nge-pipeline lemaphakatsi, hhayi nge-laptop yemuntfu. Uma kufakwa kwe-software kudlula ku-pipeline yinye yekwakha lenemvume lelinganiselwe, kungena emshinini munye akusesiyo indlela leya ekukhiciteni.
- Engeta sigaba etinkontilekeni tekwakhiwa ngebantfu bangaphandle. Unelilungelo lekuchaza kutsi ikhodi iletfwa kanjani nekutsi isuka kuyiphi i-repository, nekufuna kutsi umtsengisi agcine emathulusi akhe avuselelwe. Lena yimibandzela yenkontileka, hhayi imphikiswano yetheknoloji.
Lapha ekhaya, kute kwaloku lokungumkhuba lomuhle longakhetfwa. Tinyatselo Letisisekelo Tekuvikeleka kwe-Inthanethi letikhishwe nguLiphiko Lavelonkhe Lekuvikeleka kwe-Inthanethi (NCA) tifaka ekhatsi tigaba letisobala tekuvikeleka kwetisetjentiswa, kuvikeleka kwekuphatsa lushintjo nekwakha, nekuvikeleka kwebantfu labangesitsatfu, kantsi umtfwalo wekuvikela imininingwane yemuntfu uhlala enhlanganweni ngaphansi kweMtsetfo Wekuvikela Imininingwane Yemuntfu (PDPL). Uma umnyango uvuleke ngemshini welonjiniyela lowavula iphrojekthi yemtsengisi, loko akunciphisi umtfwalo.
Umbono we-Origami
Sifundza lemibiko lemitsatfu njengekulungiswa kwemcabango lowasakateka ngekushesha: wekutsi i-sandbox yanele nangabe i-agent ivalelwe ngekhatsi kwayo. Lobutsakatsaka abuzange bwephule kuhlukaniswa. Busebentise libhuloho lelisemtsetfweni leliphatsa lokutsite lokubhalwe ngekhatsi kwelibhokisi kuya ethulusini lelisebenta ngaphandle kwalo. Loku kusho kutsi umbuto lofanele akusiko kutsi i-agent ise-sandbox yini, kodvwa kutsi ngumaphi emathulusi lafundza loko i-agent lekukhicitako, nekutsi lawo mathulusi asebenta ngamaphi emalungelo.
Kubuka kwemsebenti lesikubona kumakhasimende: kwemukelwa kwemathulusi e-AI ngekhatsi kwemacembu ekwakha kuhamba tinyanga ngembili kwanoma nguyiphi inchubomgomo leyikulawulako. Lonjiniyela uzama lithulusi, alitsandze, bese liba yincenye yemsebenti welilanga ngaphandle kwesincumo, ngaphandle kwekubuyeketwa futsi ngaphandle kweluhlu. Inkinga akusilo lithulusi. Inkinga kutsi langena ngemnyango lokute loyibukako. Uma sibuyeketa tindzawo temakhasimende sicala khona lapha: ngumaphi emathulusi lasebenta ngempela emishinini yelicembu, ngamaphi emalungelo, nekutsi kutawenteka yini uma umyalo munye usebenta kulomunye wawo lobusuku. Uma ufuna kubuyeketwa ngalombono, utasitfola ekhasini lekuchumana.
Sicephu
Kuvetwa lokutsatfu lokutimele etinyangeni letimbili kusho intfo yinye: i-AI coding agent iguculela kuvula iphrojekthi kusuka ekufundzeni kuya ekusebentiseni, futsi lokudzingekako kutsi umuntfu wangaphandle afake umugca munye efayeleni lekuhlela. Ema-patch akhishwa kumanyenti emathulusi futsi letinye tindlela tasala tivulekile, kodvwa lesifundvo sihlala sikhatsi lesidze kunanoma nguyiphi i-release. Noma nguliphi lithulusi lolisebentisa emshinini lonemalungelo lamakhulu liyincenye yendzawo yakho yekuhlaselwa, noma libhalwe etinchubomgomeni takho noma cha. Cala ngembuto munye: ngubani elicenjini lakho losebentisa i-AI agent khona nyalo, kumuphi umshini, futsi ku-version yini?
Imitfombo
- The Hacker News — Malicious .git Configs Can Make Claude, Codex, Cursor and Other AI Agents Run Attacker Code, 2 Inyoni 2026: kuvetwa kwe-GitSpawn yi-Manifold Security, indlela ye-core.fsmonitor, luhlu lwema-agent lasiphohlongo, ema-version ema-patch netinombolo tekuhlonta i-CVE-2026-72718, i-CVE-2026-19592 ne-CVE-2026-55607.
- BleepingComputer — Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes: luchungechunge lwe-Pillar Security lolushicilelwe mhla ti-20 Kholwane 2026, butsakatsaka lobulikhomba kuma-agent lamane, i-CVE-2026-48124 nekulungiswa kwe-3.0.0 ne-0.95.0.
- Upstarts Media — Claude Code, Codex and Cursor Have Leaky Sandbox Problems, 10 Inyoni 2026: kuvetwa kwe-Accomplish nesikhatsi sekulungisa kubatsengisi labatsatfu.
- Liphiko Lavelonkhe Lekuvikeleka kwe-Inthanethi (NCA) — Tinyatselo Letisisekelo Tekuvikeleka kwe-Inthanethi, kanye neLiphiko LaseSaudi Lemininingwane Nebunhlakanipho Lobentiwe (SDAIA) — Umtsetfo Wekuvikela Imininingwane Yemuntfu (PDPL).
Imibuto lejwayelekile
Inkinga ise-AI model yona ngekwayo yini?
Cha. Butsakatsaka lobuchazwe kuto tonkhe letinkhulumo letintsatfu abuphatselani nekhwalithi ye-model noma timphendvulo tayo, kodvwa buphatselene nendlela emathulusi layiticile lasebenta ngayo. I-agent isebentisa imiyalo ye-Git ngekwayo kute icondze simo sephrojekthi, futsi i-repository lenenani le-core.fsmonitor lelinebubi yenta kutsi leyo miyalo isebentise umyalo wemhlaseli ngaphandle kwe-sandbox. Kuhlukaniswa akukaze kwephulwe; kungenwa kwaphenduka kwakuzungeza ngethulusi lelitsenjwako lelisebenta ngaphandle.
Kuvuselela lithulusi kwanele yini kuvala lengoti?
Kuvuselela kubalulekile futsi kulicinyato lekucala, ngobe ema-patch akhishiwe kuwo onkhe emathulusi lamanyenti, kufaka ekhatsi i-goose ku-1.44.0, i-Claude Code ku-2.1.196 ne-Codex CLI ku-0.131.0. Kodvwa akwanele kuphela, ngobe umbiko waphawula tindlela lebetisengakavalwa ngema-patch ngesikhatsi sekushicilelwa futsi ngobe luhlobo lolufanako lwenkinga lungaphindze luvele ngaletinye tindlela. Kuvikeleka lokuhlala sikhatsi lesidze kuvela ekuhlukaniseni emalungelo emshini welonjiniyela kuma-key ekukhicita.
Inkampani yetfu ayakhi i-software ngekhatsi. Loku kuyasitsintsa yini?
Yebo, uma usebenta ne-ejensi yangaphandle yekwakha noma likhontrakta lelikunika ikhodi, noma uma sisebenti setheknoloji sivula emaphrojekthi lavela ngaphandle emshinini lohlanganiswe nenethiwekhi yakho. Lengoti ihamba nge-repository levulwako, hhayi ngekutsi uyinkampani yetheknoloji. Yingakho imibandzela yekuletfwa kwekhodi netidzingo tekuvuselela emathulusi kufanele kube senkontilekeni yekwakhiwa ngebantfu bangaphandle.
Yini indlela lesheshako yekunciphisa umonakalo uma kusebentiswa kwenteka?
Kucinisekisa kutsi umshini welonjiniyela awunawo ema-key ekukhicita, nekudlulisa kufakwa kwe-software nge-pipeline yekwakha lemaphakatsi lenemvume lelinganiselwe esikhundleni se-laptop yemuntfu. Ngaletinyatselo letimbili, umtselela wekusebentisa uhlala kulowo mshini esikhundleni sekufika kuma-server nakuma-database lasebentako, futsi kuvimbela kuba yindzaba yekufaka kabusha sisetjentiswa, hhayi indzawo leyengenwe.
Landzela i-Origami ku-Google
Faka i-Origami njengemtfombo lokhetsiwako futsi ema-athikili etfu atawuvela kucala kuwe ekuseseni kwa-Google naku-Top Stories.








