--- title: "#aisecurity articles | Hashnode" description: "Explore 54 articles tagged #aisecurity on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/aisecurity" --- Tag # #aisecurity 54 posts · 0 followers [Rajshree](https://hashnode.com/@rjshree) · [3d ago](https://hashnode.com/posts/your-ai-agent-has-access-to-everything-who-is-controlling-it/6af4ad20cd32341e8039245b) ### [Your AI Agent Has Access to Everything. Who Is Controlling It?](https://rjshree.hashnode.dev/your-ai-agent-has-access-to-everything-who-is-controlling-it?utm_source=hashnode&utm_medium=feed) Why AI agents need their own identity, task-scoped permissions, and revocable access, with NIST guidance, OAuth token exchange, SPIFFE, and code. 21 min read · [rjshree.hashnode.dev](https://rjshree.hashnode.dev/your-ai-agent-has-access-to-everything-who-is-controlling-it?utm_source=hashnode&utm_medium=feed) [ZyVOP](https://hashnode.com/@zyvop) · [6d ago](https://hashnode.com/posts/how-to-secure-ai-coding-agents-sandboxing-and-permissions-o0bgz/6af02b7a17ccd1a8275ee024) ### [How to Secure AI Coding Agents: Sandboxing and Permissions](https://blog.zyvop.com/how-to-secure-ai-coding-agents-sandboxing-and-permissions-o0bgz?utm_source=hashnode&utm_medium=feed) Give coding agents real power without handing over the keys: a practical guide to sandboxing, least-privilege permissions, and limiting the blast radius. 14 min read · [blog.zyvop.com](https://blog.zyvop.com/how-to-secure-ai-coding-agents-sandboxing-and-permissions-o0bgz?utm_source=hashnode&utm_medium=feed) [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Nov 4](https://hashnode.com/posts/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation/6aeb26cb49289093e7fab6a1) ### [AI-Powered Social Engineering: Hyper-Personalized Phishing, Deepfake Vishing, and Automated Disinformation](https://neuralstackms.tech/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation?utm_source=hashnode&utm_medium=feed) Nov 4, 2026 · @Manuela Schrittwieser · NeuralStack | MS – AI Security Engineering Introduction Generative AI has not created a new class of social engineering attack; it has removed the cost constrain 16 min read · [neuralstackms.tech](https://neuralstackms.tech/ai-powered-social-engineering-hyper-personalized-phishing-deepfake-vishing-and-automated-disinformation?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Nov 3](https://hashnode.com/posts/software-freshness-is-a-security-metric-learn-to-measure-now/6ae9268e2060d311d9c6d83e) ### [Software Freshness Is a Security Metric! Learn to Measure Now...](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) The dashboard was green. Every image in the service had passed its scan, the report was attached to the release, and I was ready to close the ticket. Then I did a small exercise I had read about: pick 7 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) [Tech Skill School](https://hashnode.com/@techskillschool) · [Nov 2](https://hashnode.com/posts/cyber-pulse-monthly-october-2026-edition/6ae81cc2d78b2b6e45758405) ### [Cyber Pulse Monthly : October 2026 Edition](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) 𝗣𝗛𝗣𝟮𝗦𝗵𝗲𝗹𝗹 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗧𝗿𝗶𝗴𝗴𝗲𝗿 𝗪𝗶𝗱𝗲𝘀𝗽𝗿𝗲𝗮𝗱 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 𝗔𝘁𝘁𝗲𝗺𝗽𝘁𝘀 PHP2Shell vulnerabilities exposed PHP-based web applica 4 min read · [techskillschool.hashnode.dev](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Oct 29](https://hashnode.com/posts/why-a-python-library-name-showed-up-on-npm-cross-ecosystem-impersonation-explained/6ae39088829144538c653ec4) ### [Why a Python Library Name Showed Up on npm: Cross-Ecosystem Impersonation Explained](https://khushitrivedi.hashnode.dev/why-a-python-library-name-showed-up-on-npm-cross-ecosystem-impersonation-explained?utm_source=hashnode&utm_medium=feed) Learn how cross-ecosystem impersonation tricks developers, why famous Python package names land on npm, and how to stop malicious installs. 6 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/why-a-python-library-name-showed-up-on-npm-cross-ecosystem-impersonation-explained?utm_source=hashnode&utm_medium=feed) [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Oct 6](https://hashnode.com/posts/supply-chain-poisoning-in-ai-ml-pipelines/6ac520d1d186d838fdcaf75b) ### [Supply Chain Poisoning in AI/ML Pipelines](https://neuralstackms.tech/supply-chain-poisoning-in-ai-ml-pipelines?utm_source=hashnode&utm_medium=feed) NeuralStack | MS – AI Security Engineering Summary A modern ML system is assembled, not written. Training corpora are scraped or downloaded, weights are pulled from public hubs, and hundreds of trans 16 min read · [neuralstackms.tech](https://neuralstackms.tech/supply-chain-poisoning-in-ai-ml-pipelines?utm_source=hashnode&utm_medium=feed) [5](https://hashnode.com/posts/supply-chain-poisoning-in-ai-ml-pipelines/6ac520d1d186d838fdcaf75b) [Tech Skill School](https://hashnode.com/@techskillschool) · [Oct 1](https://hashnode.com/posts/cyber-pulse-monthly-september-2026/6abe415e0c9b2441a5e71e7a) ### [Cyber Pulse Monthly — September 2026](https://techskillschool.hashnode.dev/cyber-pulse-monthly-september-2026?utm_source=hashnode&utm_medium=feed) September’s cybersecurity landscape was shaped by actively exploited zero-days, renewed data-theft campaigns, attacks on enterprise infrastructure, and growing concerns around autonomous AI systems. The following 15 stories highlight significant developments reported during the month, with the first three featured prominently. 5 min read · [techskillschool.hashnode.dev](https://techskillschool.hashnode.dev/cyber-pulse-monthly-september-2026?utm_source=hashnode&utm_medium=feed) [Mira roy](https://hashnode.com/@miratechAI) · [Sep 23](https://hashnode.com/posts/scoping-tool-permissions-for-ai-agents-a-practical-pattern/6ab3b4d170ec6d709e69dc5a) ### [Scoping Tool Permissions for AI Agents: A Practical Pattern](https://ainetwork.hashnode.dev/scoping-tool-permissions-for-ai-agents-a-practical-pattern?utm_source=hashnode&utm_medium=feed) AI agent permission scoping with read-only access, scoped writes, human approval, and secure tool-call logging. 6 min read · [ainetwork.hashnode.dev](https://ainetwork.hashnode.dev/scoping-tool-permissions-for-ai-agents-a-practical-pattern?utm_source=hashnode&utm_medium=feed) [3](https://hashnode.com/posts/scoping-tool-permissions-for-ai-agents-a-practical-pattern/6ab3b4d170ec6d709e69dc5a) [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Sep 22](https://hashnode.com/posts/adversarial-attacks-on-multi-modal-llms-how-image-audio-and-video-inputs-get-weaponized-and-how-to-defend-against-it/6ab266e5dd3c65d11432b6df) ### [Adversarial Attacks on Multi-Modal LLMs: How Image, Audio, and Video Inputs Get Weaponized and How to Defend Against It](https://neuralstackms.tech/adversarial-attacks-on-multi-modal-llms-how-image-audio-and-video-inputs-get-weaponized-and-how-to-defend-against-it?utm_source=hashnode&utm_medium=feed) NeuralStack | MS — AI Security For most of the past three years, the AI security community's attention has been fixed on text: prompt injection, jailbreak templates, token-level adversarial suffixes. 15 min read · [neuralstackms.tech](https://neuralstackms.tech/adversarial-attacks-on-multi-modal-llms-how-image-audio-and-video-inputs-get-weaponized-and-how-to-defend-against-it?utm_source=hashnode&utm_medium=feed)