OOluwaseyi FatunmoleOct 5 路 27 min readThe Engineering Anatomy of API Vulnerabilities: A Deep Dive into the OWASP API Security Top 10Most security articles read like threat reports. They describe vulnerabilities from the outside looking in: what an attacker does, what the impact is, and how many systems are affected globally. That'freecodecamp.org
JJebitokSep 8 路 26 min readLLM Pentesting (TryHackMe)Link to the challenge on TryHackMe: LLM Pentesting Introduction You are on day three of an authorised penetration test for Hartwell, a B2B SaaS company whose employee portal includes an internal AI assharonjebitok.com
VV农 Nh岷璽 L芒mAug 6 路 20 min readAgent Data Injection: Fooling AI Agents With the Data They Already TrustRisk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing, blog.fiscybersec.com
HHarshal ShahJul 14 路 6 min readOWASP Top 10 for LLM Applications: Security Risks Every AI User Should KnowIntroduction Large Language Models (LLMs) such as ChatGPT, Gemini, Claude, and GitHub Copilot have revolutionized the way individuals and organizations interact with technology. From content creation delvingwithharshal.hashnode.dev
JJebitokJul 12 路 25 min readHealthGPT (TryHackMe)Link to the HealthGPT AI security CTF challenge on TryHackMe. Meet HealthGPT, a well-meaning virtual assistant used by a busy healthcare team. It helps clinicians look up procedures, draft notes, and sharonjebitok.com
JJebitokMay 9 路 13 min readRAG Security Fundamentals (TryHackMe)Introduction Retrieval-Augmented Generation (RAG) allows language models to use external documents when answering questions. Instead of relying solely on training data, a RAG system retrieves relevantsharonjebitok.com
JJebitokMay 8 路 10 min readSecuring AI Systems (TryHackMe)Introduction TryTrainMe's engineering team has built TryAssist, an AI-powered code review assistant that analyses pull requests, queries internal documentation, and connects to the CI/CD pipeline. Befsharonjebitok.com
Eeyal doronNov 26, 2025 路 19 min readPrompt Injection: What Security Managers Need to Know馃搵 What This Article Covers If you're responsible for security in AI systems, prompt injection is the threat you need to understand first. It's not just another vulnerability鈥攊t's the #1 risk on the OWASP LLM Top 10, and it affects every organization...aisecuritydir.hashnode.dev
KKaustubh RaiJun 28, 2025 路 3 min readJune Meetup HighlightsBreachForce鈥檚 June edition bought 2 talks. NaughtyMag: Making Macbook Blink Its Data Away by Adhokshaj Mishra Securing the Mind of Machines : GenAI Security & Trust Frameworks by Harsh Tandel Nabreachforce.net
