Tag feed

#llm-security

50 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

MSManuela Schrittwieserneuralstackms.tech3d ago · 7 min read

Identity & Trust: The Foundation of Secure AI Systems

NeuralStack | MS — AI Security Every security control eventually reduces to two questions: who is acting, and how much should they be believed. Access control answers the first question. Trust calibra

0

TSTech Skill Schooltechskillschool.hashnode.dev4d ago · 7 min read

AI Agents Are Changing Cyber Attacks: What Security Professionals Need to Know

In early 2026, a mid-sized financial firm experienced something unprecedented. What appeared as a coordinated ransomware attack unfolded in under one hour from initial access to domain-wide encryption

0

HSHarshal Shahdelvingwithharshal.hashnode.dev5d ago · 6 min read

OWASP Top 10 for LLM Applications: Security Risks Every AI User Should Know

Introduction Large Language Models (LLMs) such as ChatGPT, Gemini, Claude, and GitHub Copilot have revolutionized the way individuals and organizations interact with technology. From content creation

0

AGAkshit Gandotraakshitg.hashnode.devJul 4 · 5 min read

The Anatomy of an LLM Vulnerability: Analyzing the OWASP Top 10 for GenAI

This blog is a part of the #DataAndAI Series When we deploy traditional web applications, we know how to define boundary lines. We validate input formats, we sanitize database queries, and we construc

0

AAAevris AIaevris-mcp.hashnode.devJun 29 · 16 min read

AEVRIS and the OWASP LLM Top 10 (2025): An Honest Capability Map

The OWASP Top 10 for Large Language Model Applications (2025 edition) is the most widely referenced framework for understanding AI application security risks. It is the document security teams use to

0

JJebitoksharonjebitok.comJun 26 · 61 min read

Token City - AI Odyssey CTF (TryHackMe)

Link to the section of the AI Odyssey CTF on TryHackMe: Token City. It covers challenges like: ML Sec: The Loan Arranger | AI Sec + DFIR: Rogue Commit | AI Sec + Web App Sec: Sealed Substation | Agent

1

S

VNVũ Nhật Lâmblog.fiscybersec.comJun 23 · 12 min read

Gemini's Secret Affair: Notification-Based Prompt Injection and the Fake Context Alignment Technique

A single WhatsApp message from an unknown number is enough to turn the Gemini voice assistant into an attacker's tool — opening the smart windows in a victim's home, live-streaming their video over Zo

0

MSManuela Schrittwieserneuralstackms.techJun 17 · 14 min read

RAG Under Fire: Retrieval Pipeline Vulnerabilities & Indirect Prompt Injection

NeuralStack | MS Tech Blog – Databases & Data Engineering in AI Security Engineering, Part 3 of 4 The Retrieval Pipeline as a Trust Boundary Retrieval-Augmented Generation (RAG) is now the dominant a

0

NDNAS Digitalnasdigital.hashnode.devJun 12 · 8 min read

Your Semantic Kernel Agent Has a CVSS 10.0 Vulnerability — And the Patch Doesn't Fully Fix It

On 7 May 2026, Microsoft disclosed two critical vulnerabilities in Semantic Kernel, the official .NET framework used to build AI agents and LLM-powered applications. One was assigned a CVSS score of 1

0

NPNarges Pourkamalisafeai.blogJun 8 · 8 min read

PortSwigger's Insights: Understanding Web LLM Attacks

PortSwigger has taken an important step towards understanding LLM attacks. I studied this topic and wrote down the key points to better understand it. 1. Fundamental Concepts Learn a little more about