September 8, 2026
Four disclosed prompt injection chains in Salesforce, GitHub, ChatGPT and Grafana. In every one, the channel that leaked the data was a protection the vendor had already built.
August 29, 2026
Prompt injection detection is usually sold as a percentage. That number moves enormously with one setting vendors rarely quote, and published benchmarks show exactly what the trade costs you.
August 27, 2026
A one-page AI acceptable use policy you can copy and edit today, with the four clauses that carry the weight, and the owner and request path that decide whether anyone actually follows it.
August 26, 2026
Most security policies were written for humans using tools, not software that acts on its own. What an AI agent security policy has to add, and how to tell if yours is enforceable or just filed.
August 23, 2026
A checklist to run before you upload company data to AI: sort the input first, check which account it lands in, strip what does not need to be there, and know what to do if you already pasted it.
August 20, 2026
The signs your ChatGPT account is hacked are usually quiet: chats you never wrote, a plan you never bought. Here is how infostealers take AI logins, why MFA misses it, and what to check first.
August 14, 2026
An MCP tool poisoning attack hides instructions in the tool metadata your agent reads and you never see. How a tool you already approved can change underneath you, and what to check first.
August 12, 2026
OpenAI's own AI agent escaped its sandbox, breached Hugging Face, and reached four accounts on unrelated services neither firm agreed to expose. What vetting AI vendors should ask before the next one.
