// 00Tag · security

#security

7 posts

AI security: prompt injection, data leaks, agent agency. How to design the defense from the first line, not after an incident.

18/06/2026

Prompt injection in tool-equipped agents: deeper risk

In 2026, AI agents invoke tools, not just respond. How injection tricks an agent into querying a database or sending an email—and how to prevent it.

17/06/2026

Data governance for AI: classification, access, retention, and lineage

Data governance for AI and RAG in 2026: sensitivity classification, role-based access, retention, lineage, DPIA, and PII minimization — with a ready-to-use checklist.

17/06/2026

LLM red teaming: test your assistant with attacks before production

LLM red teaming in 2026: how to build an attack catalog, score vulnerabilities, and close them in a continuous regression testing loop before someone else does.

17/06/2026

Data leaks via LLM: how to protect company and customer data

Data leaks via LLM in 2026: attack vectors and defense — PII masking before the model, guardrails, self-hosting, zero-retention, and audit. Decide what you need.

01/06/2026

AI Act and GDPR in 2026: What a Company Implementing AI Must Do

The AI Act is being enforced in stages—from August 2026 transparency and high-risk obligations are added. What this means in practice: human oversight, DPIA, and how to design compliance from the first line of code, not after an incident.

01/06/2026

AI assistant security audit: pre-deployment checklist

AI assistant security audit 2026: checklist covers prompt injection, PII leakage, tool permissions, rate-limiting, and RAG database vulnerabilities.

01/06/2026

LLM Security: OWASP Top 10 in Practice

OWASP LLM Top 10 outlines 10 vulnerability classes in large language models. How each manifests in production systems and how to build layered defenses.

← all posts