Loading…
Tag
security
10 posts with this tag.
Other tags:All posts2026acceptable-useaccountabilityadministrative penaltiesAdobe FireflyAfrican musicage gatingagent oversightagentic AIai-acceptable-useai-adoptionAI Agent Safetyai-agentsai-apisai-behaviorai-code-governance
·9 min read
TypeScript AI Agent Output Validation: 6 Patterns with Code Templates
Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.
·8 min read
TypeScript AI Agent Authorization: 6 Patterns with Code Templates
Copy-paste TypeScript patterns for AI agent tool authorization: allowlists, scoped tokens, human-in-the-loop gates, rate limits, audit logging, and role-based access. Working code, not theory.
·10 min read
AI Code Governance: Rules for GitHub Copilot, Cursor, and Code Gen Tools (2026)
GitHub Copilot and Cursor send your code to external servers. Without governance rules, developers accidentally expose proprietary algorithms, credentials, and customer data. Five rules every engineering team needs before the next PR.
·10 min read
Vercel Breach 2026: Supply Chain Risk via Infostealer
Lumma infostealer via a Roblox script compromised Vercel through a contractor. What this attack chain means for teams on third-party platforms.
·8 min read
When the Fed and Treasury Call the Banks: AI Cyber Risk Is Now a Systemic Concern
The Fed and Treasury convened major banks over AI-driven systemic cyber risk. What it signals for small financial teams and controls regulators expect.
·9 min read
AI Zero-Days: What Project Glasswing Means for Small Teams
Anthropic's Project Glasswing autonomously found thousands of AI zero-days. Three security posture updates every small team using AI vendor APIs must make now.
·9 min read
AI Vendor Due Diligence in 30 Minutes (Questions + Scoring Sheet)
AI vendor due diligence in 30 minutes: 5 pass/fail gate questions, 8 deep questions, a 1–3 scoring sheet, and a copy-paste procurement email. No dedicated security team required.
·8 min read
AI Incident Response Playbook for Small Teams
What to do when an AI tool causes a data leak, ships a bad output, or gets misused. A step-by-step response playbook sized for teams without a security team.
·7 min read
AI Vendor Evaluation Checklist for Small Teams
Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.