Tag
AI Security
AI Engineering Practice
Auditing MCP Server Permissions Before You Wire Them Into an Agent
Connecting a new tool server to an agent is a permissions decision, not just an integration step. Here's a practical checklist for scoping what an MCP server can actually do before it goes live.
Prompt Injection
Prompt Templates Have an Injection Problem Too: Treat User Data Like Untrusted Input, Not Just Text
Most prompt injection advice focuses on malicious instructions hidden in retrieved content. There's a quieter, more common version of the same bug sitting in your own template code.
AI Engineering Practice
Prompt Injection Isn't Solved by a Better System Prompt: Defense Patterns for Tool-Using Agents
A system prompt is a suggestion, not a security boundary. Here is what OWASP recommends and how to design agents so an injection is survivable.
AI News
AI's Trust Problem Comes Into Focus: Enterprise Deals, Hidden Prompts, and a Productivity Reality Check
This week's AI news shows a widening gap between soaring enterprise investment and mounting evidence that security risks and productivity promises haven't caught up.