Loading…
Tag
security
10 posts with this tag.
Other tags:All postsacceptable-useaccess-controlagentic-aiai-acceptable-useai-adoptionai-agentsai-apisai-assistantsai-behaviorai-codingai-coding-toolsai-complianceai-contentai-copyrightai-costai-disclosure
·9 min read
Vetting AI Tools: How to Avoid Fake AI Apps and Malware (7-Step Check, 2026)
Searching for popular AI tools now surfaces fake malware sites and typosquatted packages at the top of results. A 7-step vetting check to confirm an AI tool is the real one before your team installs it.
·7 min read
AI Incident Response Plan Template for Small Teams (2026)
Copy-paste AI incident response plan template: 5 phases, role assignments, notification checklist, and timeline. Built for teams without a dedicated security or compliance function.
·9 min read
TypeScript AI Agent Output Validation: 6 Patterns with Code Templates
Copy-paste TypeScript patterns for AI agent output validation: Zod schema enforcement, PII redaction, content policy filtering, JSON repair, hallucination guardrails, and cost circuit breakers. Working code.
·14 min read
TypeScript AI Agent Tool Authorization Policy Patterns: 6 Code Templates (2026)
6 TypeScript AI agent authorization patterns with working code: allowlists, scoped tokens, RBAC, rate limits, audit logging, and human-in-the-loop gates. Copy-paste for Express or Next.js.
·10 min read
Vercel Breach 2026: Supply Chain Risk via Infostealer
A Vercel employee's personal Context AI OAuth grant, compromised by Lumma infostealer (spread via Roblox cheats), led to the April 2026 breach of non-sensitive environment variables. What the attack chain means for teams on third-party platforms.
·8 min read
When the Fed and Treasury Call the Banks: AI Cyber Risk Is Now a Systemic Concern
The Fed and Treasury convened major banks over AI-driven systemic cyber risk. What it signals for small financial teams and controls regulators expect.
·9 min read
AI Zero-Days: What Project Glasswing Means for Small Teams
Anthropic's Project Glasswing autonomously found thousands of AI zero-days. Three security posture updates every small team using AI vendor APIs must make now.
·9 min read
AI Vendor Due Diligence in 30 Minutes (Questions + Scoring Sheet)
AI vendor due diligence in 30 minutes: 5 pass/fail gate questions, 8 deep questions, a 1-3 scoring sheet, and a copy-paste procurement email. No dedicated security team required.
·7 min read
AI Vendor Evaluation Checklist for Small Teams (20-Point)
Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.