Skip to main content
13 days

FCC TCPA opt-out rule takes effect · Nov 25, 2026 · See what changes

Tag

security

13 posts with this tag.

Other tags:All postsab1883ab1898acceptable-useacceptable-use-policyaccess-controlaccountabilityadmtadtechadvertisingage-verificationagentic-aiai-acceptable-useai-adoptionai-agent-governanceai-agent-securityai-agents
Ollama Security: Check If Your AI Server Is Exposed

·8 min read

Ollama Security: Check If Your AI Server Is Exposed

Ollama's local API has no login, and an attacker in Japan listed AI servers as targets. How to check yours, the Docker trap, and the fixes.

Warp Terminal Privacy: 3 Settings to Check After the Breach

·8 min read

Warp Terminal Privacy: 3 Settings to Check After the Breach

Warp says attackers reached agent traces for up to 1% of users. Which plans send AI data to Warp, 3 settings to check, and how Copilot and Claude compare.

Claude Georgia Paywall Bypass: Agent Data-Access Rules

·8 min read

Claude Georgia Paywall Bypass: Agent Data-Access Rules

Claude pulled Georgia vote counts with a dashboard token instead of the state's $485 voter file. Copy these data-access rules so your agents stop at the gate.

CISA AI Token Guidance: A Denial-of-Wallet Playbook

·8 min read

CISA AI Token Guidance: A Denial-of-Wallet Playbook

CISA and four Five Eyes agencies published AI token guidance on October 22. Seven steps a small team can run: tiers, 70/80/90 alerts, loop caps.

OpenCode Security Breach: What to Do With Your API Keys

·6 min read

OpenCode Security Breach: What to Do With Your API Keys

OpenCode says a Console breach may have exposed users' OpenAI, Anthropic and Google keys. A checklist to revoke, rotate, check billing and cap spend.

SOC 2 for AI Systems: What Auditors Check

·12 min read

SOC 2 for AI Systems: What Auditors Check

What SOC 2 AI controls do auditors check in 2026? All 5 trust service criteria, common gaps, and prep steps before your next audit.

Vetting AI Tools: How to Avoid Fake AI Apps and Malware

·9 min read

Vetting AI Tools: How to Avoid Fake AI Apps and Malware

Fake AI apps and malware sites now outrank the real download on Google. Run this 7-step check for vetting AI tools before your team installs anything.

AI Incident Response Plan Template for Small Teams (2026)

·11 min read

AI Incident Response Plan Template for Small Teams (2026)

5-phase AI incident response plan template for 2026: copy the roles, notification checklist, and timeline, then test it in a 90-minute tabletop drill.

TypeScript AI Agent Output Validation Patterns with Code

·9 min read

TypeScript AI Agent Output Validation Patterns with Code

Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.

TypeScript AI Agent Authorization Patterns: Allowlist, RBAC

·14 min read

TypeScript AI Agent Authorization Patterns: Allowlist, RBAC

6 TypeScript AI agent authorization patterns: allowlist, scoped tokens, RBAC, rate limiter, audit log, HITL gate. Each under 80 lines. Express-compatible.

CEO AI Tool Approval Checklist: Questions Before You Say Yes

·8 min read

CEO AI Tool Approval Checklist: Questions Before You Say Yes

Before approving Cursor, ChatGPT, Claude, or Notion AI, run these 10 questions. Takes 30 minutes and prevents most governance mistakes small teams make.

AI Vendor Due Diligence Questionnaire: 30-Minute Gate

·13 min read

AI Vendor Due Diligence Questionnaire: 30-Minute Gate

AI vendor due diligence questionnaire: 5 gate questions, 8 deep questions, the evidence to file and a 1-3 scoring sheet, run on OpenAI and Anthropic terms.

Showing 12 of 13 posts.