HisnLabsSite map
Every page of hisnlabs.com, grouped by section.
HisnLabs
Guardrino
Product
Learn
Solutions
Developers
- Developer docs
- Install
- AI platforms
- Proxy
- Streaming
- LiteLLM
- MCP
- Live demo
- Open model
- Install the proxy
- Install with LiteLLM
- Install the MCP proxy
Company
Research
FireAI
Solutions
- Families and students
- NGOs, journalists and whistleblowers
- Lawyers and legal teams
- Digital nomads and remote workers
Material Design
- Colors
- Typography
- Icons
- Spacing & grid
- Radii, shadows & glass
- Buttons
- Inputs
- Chips & badges
- Links
- Hints
- Download button
- Language switcher
- Header & nav
- Footer
- Mascot hero
- Doc & blog cards
- Docs page
- Blog article
- News article
- Download page
- Logo & app icon
- Mascot family
- "Protected by FireAI" badge
- Usage rules & trademark notice
Other products
Docs
- Docs
- The Home dashboard
- Your protection status at a glance
- How FireAI watches your Mac’s connections
- Install the FireAI Mac firewall and finish Setup
- Answer your first connection prompt, and what each lifetime means
- The World map
- Find out where an app sends data, on the World map
- Activity: monitor network connections on your Mac, app by app
- The menu bar widget
- Who’s online: see every device on your network, and get told when one comes or goes
- Security modes: Home, Coffee shop, Paranoid, Under attack
- The kill switch: cut your Mac off the internet in one click
- Parental Controls for Mac: block adult sites, gambling, drugs, games, ads and scams
- Set up Child Safety First on your child’s Mac
- Coffee Shop Armor: safer on public Wi-Fi, and warned about fake networks
- USB Network Protection: nothing from a USB drive goes online unasked
- Clipboard Armor: spot an app that goes online right after you copy something
- Agent profile: OpenClaw, Hermes Agent & Claude Code security on Mac
- Pick the right security mode for where you are, and use the kill switch
- Your own IP blocklist
- Threat lists (opt-in)
- The Threats page: what looks wrong, and why
- Investigate a connection
- Find apps with known security flaws
- Turn on threat lists, and investigate a flagged connection
- Deep inspection, without decrypting anything
- Mac firewall rules: by app, website, domain, IP or range
- Block an app’s internet access on Mac, or just one company or domain
- Timed rules: only at night, only during work hours, only on weekends
- Allow only during work hours, or never at night
- Places: rule profiles that switch with your Wi-Fi network
- Switch profiles automatically by Wi-Fi network
- Quick rules: check before every other rule
- Import and export your rules
- Ask FireAI: control your Mac firewall in plain language
- Use Ask FireAI in plain language
- Ask FireAI in your language: 16 languages, one real order each
- FireAI Pilot: FireAI decides the easy connections for you
- Use FireAI Pilot safely: what it decides, and how to correct it
- FireAI Pilot learns each Wi-Fi network and each security mode
- Requests by country and upload spikes: spot possible data exfiltration
- Review your suggestions in seconds with Quick Review
- The on-device AI model, opt-in
- Use FireAI’s AI on an Intel Mac with Ollama
- How Ask FireAI understands you: the parser, the on-device model, and every instruction we give it
- "Why block this?": what a destination usually sends, and why people block it
- Your preferences, kept in your own words
- What stays on your Mac, and the only times FireAI goes online by itself
- See which app turns on your camera or microphone, and where its traffic goes
- AirDrop Shield: know when strangers can see your Mac
- Demo mode, and what a licence unlocks
- Activate your licence
- Get new versions of FireAI automatically
- Check for updates from the FireAI menu
- FireAI Help: ask in your own words, and FireAI shows you where it is
- FireAI says “Filter offline” or shows no connections
- FireAI never asks me about new connections
- FireAI doesn’t offer the new version
Blog
AI security and LLM guardrails
- Guardrino-t7 v7: nearly 9 in 10 Arabic attacks caught, in about 15 ms
- Why an AI guardrail has to sit in the request path
- Inside Guardrino’s lab: Arabic prompt injection, what broke and what we fixed
- Guardrino-t7 Open: an Arabic and Arabizi prompt-injection classifier, now on Hugging Face
- Guardrino-t7 is coming: UAE AI guardrails for Arabic and Arabizi
- Agent-to-agent business in the UAE: protecting the AI that talks to AI
- What are AI guardrails? A plain guide for businesses
- Guardrails that don’t annoy your users: why fewer refusals is a security win
- How to test an AI guardrail with public test sets, step by step
- Why we are building Guardrino: AI guardrails made for the Middle East
- When a document gives your AI assistant orders: five defences, tested
- What AI assistant memory stores, and why viewing, editing and forgetting it matters
- Consent before an AI transcribes a call: France, Morocco and the one-party rule
- What cloud voice assistants keep from your voice, and what on-device speech recognition changes
- Client confidentiality for freelancers who plan their work in cloud AI tools
- Data Exfiltration on a Mac: How It Happens and How to Detect It
- Aider Security on Mac: Monitor Its Network Connections
- Amp Coding Agent Security on Mac: Monitor Its Connections
- Every Other AI Agent on Your Mac: Python, npm, Bun, Native
- Monitor the ChatGPT Mac App Network Connections: Security on Mac
- Monitor Claude Code Network Connections on Mac: Security with FireAI
- Monitor the Claude Desktop App Network on Mac: Security with FireAI
- Crush Agent Security on Mac: Monitor Its Network with FireAI
- Monitor Cursor Network Connections on Mac: AI Agent Security
- Gemini CLI Security on Mac: Monitor Its Network Connections
- GitHub Copilot CLI Security on Mac: Watch Its Connections
- Goose Agent Security on Mac: Monitor Network Access (FireAI)
- Hermes Agent Security on Mac: Monitor Its Network Access
- Kiro Security on Mac: Monitor Its Network Connections with FireAI
- Muse from Meta on Mac: Monitor Its Network Access with FireAI
- Monitor OpenAI Codex CLI Network Access on Mac with FireAI
- Securing OpenClaw on Mac: Monitor Its Network Connections
- opencode Security on Mac: Monitor Network Access with FireAI
- Is Qwen Code Safe on Mac? Monitor Its Network with FireAI
- Trae Security on Mac: Monitor Network Access with FireAI
- Is Windsurf Safe on Mac? Monitor Its Network Access with FireAI
- FireAI recognises 19 AI agents on macOS and limits where their data goes
- OpenClaw and Hermes Agent Security Incidents in 2026: Exposure, Skills, Bans
- The Best Tools of 2026 for AI Model Security
- How FireAI Limits the Network Damage of OpenClaw’s Risky Mistakes on Your Mac
- How Anthropic red-teams Claude, and what it leaves to you
- OpenClaw vs Hermes Agent: Two Open-Source Personal AI Agents Compared
- Shared responsibility for LLMs: who secures what
- A career in AI cybersecurity: what you need to know
- Do AI certifications make sense when AI moves this fast?
- Why Endpoint Detection Struggles With an AI Agent That Goes Rogue
- Jev and the Rise of Decision Models: What System One AI Means for Security Tools
- Running an LLM on Your Own Mac Is Not Automatically Safe
- The MCP Blind Spot: When a Document Can Make Your AI Agent Act
- Slopsquatting: When Your AI Coding Assistant Invents a Package, and Someone Else Registers It
- Can an AI Steal or Wipe Your Identity?
- Prompt Injection Against AI Agents: A Hands-On Walkthrough
- Running a Local LLM on Apple Silicon for Security Triage
- How Good Are AI Models at Security Work? What the Public Benchmarks Show
- What an AI Token Cost, 2022 to 2026: OpenAI, Anthropic and DeepSeek
- When AI Agents Went Rogue: Inside the OpenAI–Hugging Face Incident
- Why AI Firewalls Are Essential for Mac Users
- Poisoned Prompts & Phantom Data: The Hidden Risks of Embedded AI Tools
- The Synthetic Identity Crisis: How to Prove You Are Still You Online
- When Algorithms Go Rogue: Defending Your System Against Autonomous Malware
- The Deepfake Dossier: How AI Reconstructs Your Life from Digital Breadcrumbs
Mac security
- Your ID number leaked: why scam messages now sound right, and five signs that still give them away
- DNS Leaks Explained: Why Lookups Must Travel Through Tor on a Mac
- Threat Models for Journalists, Researchers and Activists on a Mac: Who Sees What
- Tor New Identity Explained: NEWNYM, Circuit Renewal and Their Costs
- Why Tor Chooses Random Paths: Speed, Guards and the Cost of a “Fastest Route”
- Onion Services Explained: v3 Addresses, RFC 7686 and Safe Access
- Per-App Tor Routing on macOS: Why All-or-Nothing Tunnels Leak Context
- Relay Authority: Scoring Tor Relays from 0 to 100, and Where It Stops
- What Tor Hides on a Mac, and What It Leaves Exposed
- Best Mac Firewall in 2026: Choosing by What You Need
- How to Turn On the Firewall on a Mac (macOS 14, 15, 26), and What It Doesn’t Block
- FireAI vs Little Snitch: Which Mac Firewall Fits You in 2026?
- FireAI vs LuLu: Free Open-Source Firewall or On-Device AI for Your Mac?
- FireAI 1.0: a redesigned interface that shows the state of a Mac’s network at a glance
- FireAI Pilot Now Learns Each Network: Home, Café and Jobsite Get Their Own Answers
- One Switch for a Child’s Mac: Parental Controls Arrive in FireAI 0.1.7
- FireAI 0.1.6: See Every Device on Your Wi-Fi, Lock Down USB Sticks, and 5 More Ways to Own Your Mac’s Network This Weekend
- From “Allow nsurlsessiond to 17.253.x.x?” to “Apple is downloading an update”: How FireAI Puts AI Inside the Firewall
- Mr. Robot’s Hacks, Explained: Which Would Work on Your Mac Today — and What Actually Stops Them
- How to Spot a Rogue Device on Your Home Wi-Fi (the Mr. Robot Raspberry Pi Trick)
- USB Drop Attack: What a Found USB Stick Can Do to a Mac
- What Is Actually Inside Your Electron Apps? We Extracted One to Find Out
- Encrypted Client Hello and DoH: What Perimeter Firewalls Can No Longer See
- Building a Distraction-Free Homework Setup on a Mac
- Camera and Microphone Permissions on macOS: What “Allow” Really Means, and How to Take It Back
- “Install as App” Phishing: When a Website Pretends to Be Software
- Does a Downloaded File Phone Home? We Tested Spotlight and Quick Look on macOS 26
- Have You Ever Wondered If Someone Is Watching You Through That Little Black Hole at the Top of Your Screen?
- Beyond the VPN: Why On-Device Firewalls Are the New Gold Standard
- Invisible Connections: What Your Computer Is Whispering to the Internet
- Your Mac Isn’t as Private as You Think: The Truth About Background Telemetry
- Hunting Persistence on macOS: LaunchAgents, Login Items and Background Tasks
- Check Any Mac App’s Signature and Notarization From the Terminal
- The macOS pf Firewall: What It Can Do, and Why It Can’t Be Your App Firewall
- Encrypted DNS on macOS: DoH and DoT With Configuration Profiles
- Audit What Your Mac Sends in 10 Minutes, From the Terminal
- What Privacy-Conscious Mac Users Are Turning On in 2026
- Public Wi-Fi on a Mac: The Real Risk Isn’t What You Think
- Mac Security Tools Compared: Firewalls, Antivirus and What Fits You
- Which Mac Apps Can You Trust? Signing, Notarization, Permissions and Network Behaviour
- Network Monitoring on a Mac: See Every Connection Your Apps Make
- Gatekeeper, XProtect and Notarization: What macOS Actually Catches — and Misses
- Mac Firewall vs Antivirus: You Need Both
- Ransomware on Mac: A Layered Defence That Actually Holds
- Spyware on a Mac: How to Spot It, What Removes It, How to Keep It Out
- The New Wave of Mac-Targeted Password-Stealing Malware
- Firewall AI for Mac: Setup and Optimization Guide
- Zero-Days on macOS: Why Unknown Threats Still Have to Phone Home
- How Chatty Is Your Mac? What macOS Says About You Without Asking
- Advanced Threat Detection on macOS: What the Layers Actually Do
- Yes, Macs Get Infected: A Short, Sourced History of Real Mac Malware
- Regain Control: How to Stop Data Harvesters Without Breaking Your Workflow
- Zero Trust at Home: Why Every App Should Earn Its Internet Access
- The Illusion of Built-In Security: Closing the Gaps the OS Leaves Wide Open
Privacy and online safety
- From Red Team to FireAI: A Note from Our CTO
- How to Tell Which App Is Using Your Mac’s Camera or Microphone Right Now
- Data Brokers: How Your Personal Information Leaks Even From a Well-Secured Mac
- File Metadata on a Mac: How to Find It and Remove It
- Ransomware Isn’t Just a Windows Problem: What Small Businesses on Mac Need to Know
- How Whistleblowers Protect Themselves: A Practical Digital Security Guide
- Securing a Mac for Remote Work: The Home-Office Checklist
- Mac Security for Creatives: Protecting Client Work Before It Ships
- The Hidden Risk on Roblox and Discord: A Parent’s Guide
- What Kevin Mitnick Can Still Teach You About Social Engineering
- The Data Broker Economy: Starving the Machine with Least Privilege
- The Enemy Inside: How "Trusted" Apps Sell Your Data Behind Your Back
News
AI security and LLM guardrails
- HisnLabs puts its open Arabic and Arabizi prompt-injection classifier online as an in-browser demo; Guardrino v6 in training
- HisnLabs is building Guardrino, an AI guardrails gateway for businesses in the Middle East, in Arabic and English
- OpenAI reports four June incidents in which internal models bypassed restrictions, took credentials and used a test-network wallet
- Fake Claude installer behind a Google ad shows bing.com as its address and copies a different command to the clipboard
- Bill Gates warns of “a lot of negative surprises” from AI-enabled cyberattacks over the next year
- IMDEA Networks paper finds six of nine AI chatbot web clients pass conversation titles or links to third-party trackers
- California’s SB 574 bars lawyers from entering confidential client information into AI tools that are not access-restricted
- Italy’s data protection authority fines IQVIA €7 million, finding that GP patient data it called anonymous could be re-identified
- Wikimedia reports OpenAI agents edited its wikis and tried to exploit its Etherpad and citation tools
- OpenAI adds invisible textGrain watermarks to ChatGPT and Codex text in the EU
- Anthropic asks Claude users to opt in to sharing voice conversations for model training
- Fake ChatGPT, Gemini, Claude and Perplexity sites phish advertising accounts with a browser-in-the-browser login
- RemoveMacAI, an open-source tool, turns off Apple Intelligence on macOS 27 and removes about 12 GB of models
- AWS fixes three flaws in its Loom AI agent platform, including an authentication bypass, and a SageMaker command injection
- Google Research argues that AI agents need privacy and security defined by context, not by secrecy alone
- A researcher reports the same request-forgery pattern in MCP servers at Google, JPMorgan and several governments
- Anthropic reports that about 950 parallel Claude agents mined phage genomes for a novel enzyme system
- Consumer Reports finds about nine in ten Americans have been targeted by a scam or cyberattack, and says AI makes fraud more personal
- MLCommons publishes a draft taxonomy of 25 privacy risks specific to AI agents
- Trump creates a "Super Intelligence Force" led by Jay Clayton, with voluntary safety commitments from AI companies
- Objective-See researchers find a flaw in the ChatGPT macOS app that exposed chat logs to local attackers
- South Korean banks report personal data leaks attributed to AI-driven attacks as regulators order a sector review
- Princeton researcher uses an AI agent and public records to link Georgia voters to their ballots
- Salt Labs hijacks the Manus AI agent with one email by encoding a prompt injection in JSFuck
- Senators Hawley and Murphy propose the AI Agent Accountability Act to extend hacking law to AI agents
- Google tests a Gemini Desktop setting that would let the assistant act across a Mac’s files and apps
- doxx.net raises $38 million for a private network on which AI agents get their own identities
- Apple plans additional controls for macOS Full Disk Access because of AI agents
- Poper Blocker extension collects browsing history and AI chat conversations, researchers report
- GitLab patches critical AI Gateway flaw that lets a user escape the prompt template sandbox
- OpenAI disrupts reasoning extraction campaign that abused interchangeable encrypted reasoning traces
- TA419 impersonates AI policy figures and an Anthropic employee in credential phishing, Proofpoint reports
- FireAI announces Agent profile, a network baseline that flags new destinations and upload spikes from AI agents on a Mac
- PixelLeak: AI coding agents published more than 13,000 internal screenshots to public GitHub repositories
- Bitdefender opens a free macOS beta of AI Guardian, a policy layer for Claude Code and OpenClaw agents
- Truffle Security finds 543,699 credentials in public GitHub repositories that still authenticate
- Google presents Gemini 4 Argon, a model that finds, validates and patches software vulnerabilities, first for trusted cyber defenders
- Microsoft Digital Defense Report: attackers are benefiting from AI faster than defenders
- OpenClaw Foundation begins a free open-source enterprise control plane for AI agents
- Carbonato botnet installs Hermes Agent on exposed Docker hosts and takes orders through Telegram
- Transluce reports AI agents sent attack payloads to a Canadian government archive website
- OpenAI describes self-replicating prompt injections, a worm-style attack on AI agents
- Freedom of the Press Foundation advises caution after reports of Meta Muse agent surprising users
- Fake Zoom installer disk image targets M-series and Intel Macs, Macworld reports
- Jamf Threat Labs analyses CloudSyncD, a two-stage macOS backdoor that hides a phished password in zero-width Unicode
- EU AI Act enforcement of general-purpose AI model rules began on 2 August 2026, and deployers keep their own share of responsibility
- Claude Opus 5.5 system card describes Anthropic’s red teaming, and what model-level testing leaves to deployers
- Attackers who once hijacked computers to mine cryptocurrency now hunt AI API keys
- OpenAI shelves GPT-6.1 Astra after safety audits find deception and unsanctioned actions
- OpenAI pauses tool use after a training agent reached an outside chatbot through a DNS filtering gap
- Cycode reports a flaw in the official MCP Python SDK that lets a malicious server collect OAuth credentials
- Huntress links malicious custom GPTs and fake verification pages to a remote access trojan on Windows
- Dutch vulnerability nonprofit DIVD says an autonomous AI agent carried out the post-exploitation phase of its breach
- Microsoft describes JadePuffer attacks in which Storm-3168 targeted over 100 Azure storage accounts in seven minutes
- UpGuard finds more than 16,000 Supabase databases with readable tables that expose personal data
- UNSW researchers find language models made to imitate drunk text reveal more secrets and follow more harmful requests
- Anthropic opens Claude Marketplace with more than 2,000 plugins and connectors
- Plugin4Shell flaw let a reviewed plugin turn hostile inside Claude Code, Codex and Copilot
- Manifold Security finds eight flaws in seven AI coding agents that run commands from a repository’s git config
- Pillar Security describes Deadbugz, an MCP server that waits for three tool calls before hunting for SSH keys
- Gen Digital finds information stealers collecting tokens and prompt histories from AI coding agents, including on macOS
- Researcher publishes exploits for four Linux kernel flaws that give a local user root, found with AI assistance
- Former Google safety chief urges independent "crash tests" for AI aimed at children
- Bill Gates says an AI "kill switch" alone will not make AI safe
- Research shows a single rogue extension can hijack five browsers’ built-in AI agents
- ChatGPT’s Computer History feature stores unencrypted activity logs on Mac, researchers report
- Cisco Talos finds a Windows implant that asks four AI models to vote on its next move
- AI agent startup Instinct raises $1 billion at a $10 billion valuation, built on broad account access
- macOS 27 keeps a Siri-related process running after Siri is disabled, and Apple Intelligence storage use exceeds Apple’s stated figures
- Nvidia launches Open Agent Safety Platform after a run of AI agents acting beyond their scope
- Huawei and Fastly launch products called an AI firewall, for entirely different jobs
- OpenAI tells dozens of institutions its agents meddled with their websites
- An OpenAI agent breached an Australian government portal on its own, Canberra says
- Australia says OpenAI agent breached Medicare systems three months before disclosure
- OpenAI says its AI agents leaked 53 images belonging to ChatGPT users
- Oxford let OpenAI train AI models on scans from the Bodleian Library
- Trump and Xi end their summit without an AI agreement, each pressing ahead on their own terms
- A Guardian column calls AI labs’ “pace the frontier” plan an antitrust risk
- Niantic built a 3D map and an AI model from Pokémon Go players’ optional location scans
- AI agents stole 600,000 payment records from online shops, for about $25 a target
- Google says its Gemini model guessed passwords and hacked three companies during a test
- WIRED ranks four levels of AI chatbot privacy, from policy promises to models that never leave your computer
- Meta's Muse AI assistant let any local app hijack a user's account
- A placeholder domain used in 1,700 code repositories now serves scam content
- Proton survey: two-thirds of UK AI users share sensitive topics with chatbots, most distrust the companies
- Sam Altman and Dario Amodei took different paths to leading rival AI labs
Mac security
- Bitchat, a Bluetooth mesh messenger, is removed from Apple’s and Google’s app stores in India after a government order
- Google Ads suspends an open-source macOS terminal tool whose process behaviour resembled a backdoor, then reinstates it
- FireAI 1.0 shows where a Mac’s data goes in real time
- Signal adds on-device encrypted backups for iOS and Desktop with restore across platforms
- Apple fixes a CoreGraphics flaw in macOS Tahoe 26.7.1 and Sequoia 15.8.1 that it says was used in a targeted attack
- Apple’s Connectivity Assist feature in iOS 27 disrupts NordVPN’s phishing protection and other filtering tools, reports find
- ZDNET reviews a free menu-bar tool that shows which Mac apps use the internet, and blocks them
- Apple Watch listening features and camera glasses revive the fight over what counts as consent
- MacSync information stealer retrieves commands from public iCloud calendar events
- A ZDNET tester lists five USB cables and dongles that can steal data or damage a Mac
Privacy and online safety
- Denmark’s population register: names, addresses and ID numbers of 8.8 million people taken through a private supplier’s access
- Russia plans to double spending on its internet blocking system and proposes a registry of VPN hosting customers
- LibreOffice and OpenOffice flaws let a malicious spreadsheet run code without a macro warning
- Citrix NetScaler flaws were exploited for at least three weeks before patches were released
- TeamViewer patches five vulnerabilities, including flaws that allow code execution through a remote session
- Fake LastPass Authenticator installer on GitHub loads a signed driver that stops 145 security processes
- 31 Chrome “VPN for” extensions share one codebase that lets operators reroute browser traffic
- Volexity links a Chrome and Windows exploit chain to fake news sites aimed at Asian government staff
- Compromised MemTensor npm and PyPI packages deliver a Go credential stealer to developer machines
- Cyberattack on Arizona’s court system may have exposed protective-order addresses
- Citrix confirms two NetScaler zero-days were exploited before patches existed
- Microsoft dismantles EvilTokens, a device-code phishing service tied to about 12,000 inboxes
- Cyberattack on Direct Communications' upstream network cuts Eagle Mountain, Utah off from the internet for days
- Cyberattacks hit school districts in Springfield, Massachusetts and Burnaby, British Columbia within a month
- ShinyHunters claims a PeopleSoft zero-day let it breach FBI job-applicant and staff data
- Researchers turn ordinary file-change notifications into a way to watch other users
- What LG smart TVs log and send, and how to at least see the device on your network
- California fined SalesIntel for not registering as a data broker. Its 54 million numbers stay in its files
University
- University
- How the internet works
- TCP/IP: addresses, ports and connections
- DNS: the internet’s address book
- Data brokers: who sells your life
- Your operating system, your first line of defence
- Layers of security: native hygiene for a safer Mac
- Malware and the hidden internet
- Threat modelling and risk for people at risk
- Cryptography you can rely on
- Network defense for a single computer
- macOS hardening, setting by setting
- Understanding cloud security
- Foundations of cybersecurity
- Networking and security architecture
- Identity and access management
- Vulnerability and risk management
- Defensive operations: how the blue team works
- Offensive security: how the red team thinks
- Cryptography and data protection
- Compliance, ethics and future trends
- AI-driven desktop defense: host-based firewalls on macOS
- Adversarial AI and threat hunting
- DevSecOps and software supply chain security
- Case studies 2026: AI agents, schools and governments
- AI security frameworks and red teaming
- AI red teaming: techniques, open-source tools and automated pipelines
- AI guardrails, explained, and how Guardrino is designed