Loading…
Tag
security
8 posts with this tag.
Other tags:All postsacceptable-useacceptable-use-policyaccess-controlaccountabilityadministrative penaltiesAdobe FireflyadtechAfrican musicage gatingagent oversightagentic-aiai-acceptable-useai-adoptionAI Agent Safetyai-agentsai-apis
·9 min read
Vetting AI Tools: How to Avoid Fake AI Apps and Malware (7-Step Check, 2026)
Searching for popular AI tools now surfaces fake malware sites and typosquatted packages at the top of results. A 7-step vetting check to confirm an AI tool is the real one before your team installs it.
·7 min read
AI Incident Response Plan Template for Small Teams (2026)
Copy-paste AI incident response plan template: 5 phases, role assignments, notification checklist, and timeline. Built for teams without a dedicated security or compliance function.
·9 min read
TypeScript AI Agent Output Validation: 6 Patterns with Code Templates
Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.
·14 min read
TypeScript AI Agent Authorization: 6 Copy-Paste Patterns (Allowlist, RBAC, HITL)
6 drop-in TypeScript patterns for AI agent tool authorization: allowlist, scoped API tokens, RBAC, per-user rate limiter, structured audit log, and human-in-the-loop gate. Tested with Express and Next.js. Paste into any agent framework.
·10 min read
Vercel Breach 2026: Supply Chain Risk via Infostealer
Lumma infostealer via a Roblox script compromised Vercel through a contractor. What this attack chain means for teams on third-party platforms.
·9 min read
AI Vendor Due Diligence in 30 Minutes (Questions + Scoring Sheet)
AI vendor due diligence in 30 minutes: 5 pass/fail gate questions, 8 deep questions, a 1-3 scoring sheet, and a copy-paste procurement email. No dedicated security team required.
·7 min read
AI Vendor Evaluation Checklist for Small Teams (20-Point)
Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.