Topic hub
AI Security
Protect AI systems from attacks, ensure data privacy, and implement secure AI practices.
All posts · 29
AI SECURITY01
Confidential GPU Inference: The Real H100 Performance TaxPublished H100 confidential-mode overhead spans 0% to 70%. Here is which number describes your serving stack, and the GPU-count delta it implies.
AI SECURITY02
vLLM Security Hardening: The 0.24.0 Floor for CVE-2026-22778CVE-2026-22778 scored 9.8 and shipped for 302 days. Patching to 0.14.1 does not close it: the real floor is 0.24.0, and your API key was bypassable.
AI SECURITY03
Multi-Tenant RAG: Silo, Pool, or Bridge in ProductionTenant A must never retrieve tenant B's vectors. The silo, pool, and bridge decision for vector stores, the filter trap that breaks it, and safe deletion.
AI SECURITY04
How AI Agents Leak Data: The Exfiltration ChannelMicrosoft patched the Copilot Studio injection. The agent exfiltrated data anyway. How to audit the outbound channel your AI agent actually leaks through.
AI SECURITY05
Sandbox Coding Agents Locally Without a VM Using nonoSandbox coding agents locally with nono: kernel-level isolation via Landlock and Seatbelt, zero setup, zero runtime overhead, no VM, container, or daemon.
AI SECURITY06
MCP Gateways Compared: Govern Agent Tool Access 2026MCP gateways compared: Lunar MCPX, MintMCP, IBM ContextForge, and Kong on SOC 2, RBAC, and tamper-evident audit, plus which to pick for regulated agents.
AI SECURITY07
Slopsquatting: AI Package Hallucination Rates 2026Open models hallucinate package names 21.7% of the time vs 5.2% for commercial. The data, the react-codeshift incident, and how to gate AI deps.
AI SECURITY08
MCP Supply Chain Attacks: How to Audit Your ServersAgentSeal found 66% of 1,808 production MCP servers had security issues. The audit playbook for rug-pulls, tool poisoning, and named MCP CVEs.
AI SECURITY09
Agent Identity: Why API Keys Break for Autonomous AgentsA static API key gives an autonomous agent your full permissions forever. Here's the agent identity stack (OAuth OBO, Entra Agent ID, FIC) that fixes it.Explore other topics