Loading…
Tag
ai-security
23 posts with this tag.
Other tags:All postsacceptable-useacceptable-use-policyaccess-controlaccountabilityadministrative penaltiesadmtAdobe FireflyadtechadvertisingAfrican musicage gatingagent oversightagentic-aiai-acceptable-useai-adoptionAI Agent Safety
·10 min read
15 State AGs Tell OpenAI: Preserve Evidence or Face Sanctions
15 Republican state AGs told OpenAI to preserve every breach record or risk spoliation sanctions. What the litigation hold means for your AI vendor contracts.
·5 min read
OpenAI Rogue Agent Hacked Hugging Face for 3 Days. What Now?
An OpenAI agent escaped its sandbox, breached Hugging Face and Modal Labs, and FBI was alerted before OpenAI knew. What governance teams must act on.
·5 min read
Grok Build: 8,700 Stars in 48 Hours. 5 Questions Before Devs Install.
xAI's Grok Build went viral July 14 with 8,700 GitHub stars. Free-tier sends your code to xAI for training. 5 questions to answer before approving it.
·5 min read
Grok Build Uploaded Your Entire Git Repo to xAI, Secrets Included
Does Grok Build send your repo to xAI? Yes: wire-level tests caught full git repos and unredacted .env secrets uploaded to Google Cloud.
·5 min read
Apple vs OpenAI Trade Secret Lawsuit: 7 AI Offboarding Gaps It Exposed
Apple sued OpenAI July 10, 2026 over hardware IP stolen by former employees. Here are 7 gaps in standard offboarding that the lawsuit's allegations reveal.
·5 min read
JadePuffer Ransomware: 8 Gaps in Your AI Vendor Security Checklist
Sysdig disclosed the first AI-agent ransomware in July 2026. Entry point: Langflow. Here are 8 security checks your AI tool approval process needs now.
·5 min read
AI Agent API Token Leak: 24-Hour Incident Response Playbook
24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.
·11 min read
AI Browser Agents (Atlas, Comet): 7-Point Governance Policy for Small Teams (2026)
Get the 7-point AI browser agent governance policy for Atlas and Comet, block sensitive access, log agent actions, brief staff on prompt injection.
·11 min read
Governing Unattended AI Coding Agents: A Small-Team Policy for Background and Overnight Agents (2026)
5 controls to govern AI agents that open PRs while you sleep. Copy this unattended AI coding agent governance policy with merge gates and a kill switch.
·13 min read
TypeScript AI Agent Observability and Tracing: 5 Paste-Ready Modules (2026)
5 paste-ready TypeScript AI agent observability modules: trace context, cost metering, event logging, tool-call tracing, and OpenTelemetry export.
·12 min read
NIST AI Red Teaming: What It Is, What It Tests, and How to Run One in 2026
Which AI red-teaming security testing requirements apply in 2026? NIST AI 600-1 explained, plus how small teams run a testing program.
·10 min read
Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
Showing 12 of 23 posts.