AI Security 39
- The Lethal Trifecta in Production: How Enterprise Copilots Quietly Became Exfiltration Tools
- The Trust Gap: Your Threat Model Stops at the Protocol Boundary
- Cosine Similarity Is Not a Safety Property
- The Injection That Passes Every Filter
- The Missing Control: A Design Proposal for Tool-Output Redaction in AI Agents
- Agent Identity: What the Standards Fix, and What They Leave Open
- What Prompt Injection Benchmarks Actually Measure
- Finding the Confused Deputy in Your Own Agent: A Taxonomy and Hands-On Test
- What 'Read-Only' Actually Reaches: The Kubernetes Permission Audit Nobody Runs
- The Containment Ladder: Four Rungs That Keep an AI Agent's Mistakes Small
- Sovereignty Isn't a Data Center. It's Who Can Be Compelled.
- Everything or Nothing: The Missing Middle in AI Agent Authorization
- Review the Reviewers: The Security Questions Behind Alberta's 466-Million-Line AI Code Scan
- Clearing Houses Will Win the Agent Era. They'll Also Be Its Biggest Breach
- My Personal AI Agent Wakes Its Own GPU When It Needs the Power
- A Competitor Shipped First. It Made My Product Better.
- The WebGoat for Agentic AI Didn't Exist, So I Built It
- Deleting the Malicious MCP Server Doesn't Save You
- How to Red Team Your AI Agent Before You Ship
- Most teams deploying AI agents are exposed. Here's the proof.
- 7 AI security checks before production
- The Right AI Security Framework Depends on the Question You're Asking
- How a Malicious MCP Server Can Drain Your Database in 5 Steps
- 5 Ways AI Systems Break Traditional Threat Model
- AI Security in Production: A Practitioner's Guide to Threat Modeling Before You Ship
- MCP Security: One Year In — Notes from OWASP Stockholm
- The AI Security Validation Crisis Nobody Is Talking About
- MCP Security Top 10: A Practitioner's Threat Model
- RAG Stack Security: Defenses That Stop Real Attacks
- RAG Poisoning: How Attackers Corrupt Your AI's Knowledge Base
- RAG Security: Attacks, Defenses & Architecture
- Red Teaming Agentic AI: CISO Playbook with Checklists and Assessment Templates
- LLM Red Teaming Tools: PyRIT & Garak (2025 Guide)
- How I Deployed OpenClaw as an AI Security Researcher: A Practitioner's Guide
- Attacking Docker Desktop via MCP: From Theory to PoC
- Tool Poisoning in MCP: Hidden Instructions, Silent Exfiltration
- MCP's First Year: What 30 CVEs and 500 Server Scans Tell Us About AI's Fastest-Growing Attack Surface
- OWASP Agentic Top 10 in Practice: MCP Tool Poisoning, Cross-Server Attacks, and the DockerDash Incident
- Your AI Agent Just Became an Attack Surface — And Most Teams Don't Know It Yet