#security
11 articles
Sandboxing AI Agents: Containers, gVisor, and MicroVMs
Sandboxing AI agents with containers, gVisor, Firecracker microVMs, and Wasm: honest boot and overhead numbers, and why egress filtering matters most.
AI Compliance in Practice: EU AI Act, SOC 2, and HIPAA
Risk tiers, documentation duties, audit trails, and health-data rules for teams shipping LLMs under the EU AI Act, SOC 2, and HIPAA in 2026.
Indirect Prompt Injection: The Attack Hiding in Your Data
How attackers embed instructions inside documents, emails, and tool outputs that your LLM retrieves and obeys — and the defenses that actually reduce the blast radius.
Red-Teaming LLMs: From Manual Probing to Automated Adversarial Testing
How to run a structured red-team engagement against your LLM system — scoping, tooling (Garak, PyRIT, PromptFoo), automation, and what the results actually mean.
Capability limits and failure modes every AI engineer must know
Hallucination, lost-in-the-middle, injection, and benchmark overfitting are structural properties of LLMs — and they shape how you design systems.
Agentic AI security: MCP tool poisoning, excessive agency, and the new attack surface
Why giving LLMs tool access fundamentally changes the threat model — MCP tool poisoning, excessive agency, and defense patterns for production agents in 2026.
PII Handling, Sensitive Data Leakage, and Privacy Controls
Where PII leaks in LLM systems — prompts, logs, embeddings, fine-tunes — and the scrubbing, masking, and retention controls that actually hold up.
Input and Output Guardrails in Production: NeMo Guardrails, Llama Guard, and Beyond
How to layer NeMo Guardrails, Llama Guard 3, and lightweight classifiers to defend LLM apps — latency costs, bypass rates, and what still fails.
OWASP LLM Top 10 (2025 Edition): A Practitioner's Walkthrough
A concrete, example-driven tour of all ten OWASP LLM risks for 2025, with real exploit scenarios, mitigations, and production trade-offs for each threat.
Prompt Injection and Jailbreaks: Anatomy of the Number One LLM Threat
How direct, indirect, and multimodal prompt injection attacks work in 2026 — and the five-layer defense architecture that actually reduces them in production.
Guardrails and Security: Production Is an Attack Surface
Prompt injection, jailbreaks, OWASP LLM Top 10, and the layered controls that actually reduce blast radius in production AI systems.