AI Security 37
- The Lethal Trifecta in Production: How Enterprise Copilots Quietly Became Exfiltration Tools
- The Trust Gap: Your Threat Model Stops at the Protocol Boundary
- Cosine Similarity Is Not a Safety Property
- The Injection That Passes Every Filter
- The Missing Control: A Design Proposal for Tool-Output Redaction in AI Agents
- Agent Identity: What the Standards Fix, and What They Leave Open
- What Prompt Injection Benchmarks Actually Measure
- Finding the Confused Deputy in Your Own Agent: A Taxonomy and Hands-On Test
- What 'Read-Only' Actually Reaches: The Kubernetes Permission Audit Nobody Runs
- The Containment Ladder: Four Rungs That Keep an AI Agent's Mistakes Small
- Sovereignty Isn't a Data Center. It's Who Can Be Compelled.
- Everything or Nothing: The Missing Middle in AI Agent Authorization
- Review the Reviewers: The Security Questions Behind Alberta's 466-Million-Line AI Code Scan
- Clearing Houses Will Win the Agent Era. They'll Also Be Its Biggest Breach
- A Competitor Shipped First. It Made My Product Better.
- The WebGoat for Agentic AI Didn't Exist, So I Built It
- Deleting the Malicious MCP Server Doesn't Save You
- How to Red Team Your AI Agent Before You Ship
- Most teams deploying AI agents are exposed. Here's the proof.
- 7 AI security checks before production
- The Right AI Security Framework Depends on the Question You're Asking
- How a Malicious MCP Server Can Drain Your Database in 5 Steps
- 5 Ways AI Systems Break Traditional Threat Model
- AI Security in Production: A Practitioner's Guide to Threat Modeling Before You Ship
- MCP Security: One Year In — Notes from OWASP Stockholm
- The EDPB's Standard Privacy Impact Assessment Template Has Three Blind Spots for Agentic AI
- The AI Security Validation Crisis Nobody Is Talking About
- Qwen3.6 on 24GB VRAM: Benchmark, Config, and Every Mistake
- When Infostealers Meet Agentic AI: The Kill Chain Security Teams Aren't Modeling
- RSAC 2026 Confirmed It: Agentic AI Security Is the Industry's Next Unsolved Problem
- AI Agents Are Widening the EU AI Act Readiness Gap
- RAG Poisoning and EU AI Act Article 10: Data Governance Is Not Optional for Retrieval Pipelines
- GPAI Meets Agentic AI: Why Your MCP Deployment Triggers EU AI Act Obligations
- How I Deployed OpenClaw as an AI Security Researcher: A Practitioner's Guide
- MCP's First Year: What 30 CVEs and 500 Server Scans Tell Us About AI's Fastest-Growing Attack Surface
- OWASP Agentic Top 10 in Practice: MCP Tool Poisoning, Cross-Server Attacks, and the DockerDash Incident
- Your AI Agent Just Became an Attack Surface — And Most Teams Don't Know It Yet