CJChristian Johannseninbreakglass.hashnode.dev·Sep 10 · 7 min readPermissions vs. Policies in LLM Systems: What Matters WhereLLM agents call tools, read data, and act on behalf of users. Securing them depends on keeping two concepts apart: permissions and policies. A third element, prompt instructions, is often mistaken for00
JHJames Harmoninhrafns-blog.hashnode.dev·Aug 27 · 25 min readWhy Treating AI as Traditional Software Is a Security Mistake Waiting to HappenArtificial Intelligence (AI) has moved from novelty to infrastructure remarkably quickly. Organizations are integrating large language models into applications, internal tools, customer-facing systems00
TFThe Flux Readinthefluxread.hashnode.dev·Aug 23 · 7 min readRAG vs. GraphRAG for Enterprise AI Agents: Architecture, Data Governance, & Latency BottlenecksStandard Vector-based Retrieval-Augmented Generation (RAG) is hitting a hard operational ceiling in enterprise environments. While dense vector embeddings excel at semantic similarity search across un00
KSKamran Shaghaghiincloudironguard.hashnode.dev·Aug 17 · 8 min readDefending the AI Perimeter: Mitigating OWASP LLM10 (Model Theft & Data Exfiltration) with GKE Dataplane V2 and eBPFWhen enterprises adopt Generative AI, security teams often focus entirely on the application layer: sanitizing prompt inputs and filtering chat outputs. However, as autonomous LLM agents gain tool-cal00
AKAshutosh Kumarinaskuma.hashnode.dev·Aug 6 · 10 min readIntroducing the Guardrail Platform: guardrailmesh + guardrailprobeArchitecture, benchmark results, and the engineering decisions behind two open-source tools for AI safety enforcement and verification. Part of the Guardrail Platform Launch Series. Week 1: Runtime 00
VNVũ Nhật Lâminblog.fiscybersec.com·Aug 6 · 20 min readAgent Data Injection: Fooling AI Agents With the Data They Already TrustRisk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing, 00
HSHarshal Shahindelvingwithharshal.hashnode.dev·Aug 5 · 6 min readAI Security Guardrails: Building Safe and Trustworthy AI ApplicationsAs AI applications become more powerful, they also become more vulnerable to misuse, prompt injection, sensitive data leakage, hallucinations, and unsafe actions. AI Security Guardrails provide the pr00
AKAyesha Khaninayeshakoder.hashnode.dev·Aug 5 · 8 min readI Built a Vulnerable LLM Bot and Caught My Own Judge Lying to MeBreaking My Own Defenses: What Happens When You Actually Build the Thing Part 1 of this series mapped how prompt injection and jailbreaking get malicious instructions into a model and past its guardra21K
MMaverickinjyanshu.hashnode.dev·Aug 3 · 11 min readModel Context Protocol (MCP)The open standard that gives AI agents a universal plug for the world's tools. What Problem Does MCP Solve? Before MCP, building an AI agent that could use external tools looked like this: Every ne00
MSManu Shuklainecorpit.hashnode.dev·Aug 1 · 16 min readRedact PII before it reaches the LLM: a 2026 DPDP-ready build guideRedact PII before it reaches the LLM: a 2026 DPDP-ready build guide Summary. Once a prompt leaves your network for a hosted model, you no longer control where the personal data inside it is logged, ca00