LLM Security

72 posts in LLM Security · Browse all posts

- Agentic AI Security
- LLM Security
A hole in every one: bypassing the open source AI skill scanners
July 30, 2026
We ran eight open source AI skill scanners against real attacks. A malicious skill got past all eight, including the current OASB leaderboard leader.
- Agentic AI Security
- LLM Security
The AI agent sandbox escape that breached Hugging Face: what happened, and what to fix
July 27, 2026
An OpenAI benchmark agent escaped its sandbox and breached Hugging Face, logging 17,000+ actions. What the evidence shows, what's unproven, and what to fix.
- LLM Security
We broke GPT-5.4 safety with 10 examples and 2 words using a new attack technique — IICL
April 23, 2026
IICL is a structural jailbreak bypassing GPT-5.4 safety with just two words. Learn why newer doesn’t mean safer and what this means for teams building on…
- Agentic AI Security
- LLM Security
From chatbots to digital workers: Managing the business risks of agentic AI
February 18, 2026
AI agents don’t just suggest transfers — they execute them. Attackers can now hijack goals, poison memory, and turn your digital workforce against you…
- Agentic AI Security
- LLM Security
Why chatbot red teaming won’t save you from agentic AI disasters
February 3, 2026
Traditional chatbot red teaming leaves 85% of the agentic AI attack surface exposed. Learn what action risk entails, explore key agentic threats like memory…
- Agentic AI Security
- LLM Security
- MCP Security
Security Risks of the Model Context Protocol: Can Autonomous Agents Handle Adversarial Testing? Conversation with ChatGPT, Claude, Grok & Deepseek
August 28, 2025
Explore key findings on MCP Security from ChatGPT, Claude, Grok, and Deepseek—shared risks, conflicting views, and critical blind spots.
- LLM Security
Towards Secure AI Week 33 — Lenovo Chatbot Breach, PROMISQROUTE in GPT-5, NIST AI Security Overlays, EU AI Priorities, and Grok Privacy Leak
August 25, 2025
This week’s AI Security Digest covers Lenovo chatbot breach, PROMISQROUTE in GPT-5 routing, NIST AI security overlays, EU AI-CAP priorities, and Grok…
- LLM Security
- GenAI Security
Lenovo AI Chatbot Incident: Critical XSS Vulnerability Exposes Enterprise AI Security Gaps
August 22, 2025
The Lenovo AI Chatbot Incident shows how a 400-char prompt triggered a critical XSS flaw, proving AI systems can turn simple exploits into major security…
- LLM Security
PROMISQROUTE: GPT-5 AI Router Novel Vulnerability Class Exposes the Fatal Flaw in Multi-Model Architectures
August 19, 2025
PROMISQROUTE shows GPT-5 router flaw letting attackers force weaker models, bypass safety, and expose hidden risks in multi-model AI.
- LLM Security
Towards Secure AI Week 32 — NIST Control Overlays, OWASP Landscape, LLM Trustworthiness Scores, and GPT-5 Jailbreak
August 18, 2025
AI security updates: NIST control overlays, OWASP frameworks, and LLM trustworthiness scores reveal key risks in enterprise and agentic AI security.
- GenAI Security
- LLM Security
Towards Secure AI Week 31 — Gemini Smart Home Hijack, LLM Slopsquatting, GPT-5 Jailbreak, OWASP Landscape, and GenAI Data Exposure
August 11, 2025
This week’s AI Security Digest covers Gemini smart home hijack, GPT-5 jailbreak, LLM slopsquatting, GenAI data leaks, and new OWASP security reports.
- LLM Security
Towards Secure AI Week 29 — America’s AI Action Plan, LLM Plugin Flaws, and Package Hallucination Risks
July 28, 2025
This week’s highlights: a powerful new Grok jailbreak technique, CoSAI’s whitepaper on defending AI systems, and IAM vendors drifting from Zero Trust.

More research

AIRQ: AI Risk Quadrant — independent AI agent security rating

AIRQ: AI Risk Quadrant — independent AI agent security rating

AIRQ: AI Risk Quadrant — independent AI agent security rating

LLM Security

A hole in every one: bypassing the open source AI skill scanners

The AI agent sandbox escape that breached Hugging Face: what happened, and what to fix

We broke GPT-5.4 safety with 10 examples and 2 words using a new attack technique — IICL

From chatbots to digital workers: Managing the business risks of agentic AI

Why chatbot red teaming won’t save you from agentic AI disasters

Security Risks of the Model Context Protocol: Can Autonomous Agents Handle Adversarial Testing? Conversation with ChatGPT, Claude, Grok & Deepseek

Towards Secure AI Week 33 — Lenovo Chatbot Breach, PROMISQROUTE in GPT-5, NIST AI Security Overlays, EU AI Priorities, and Grok Privacy Leak

Lenovo AI Chatbot Incident: Critical XSS Vulnerability Exposes Enterprise AI Security Gaps

PROMISQROUTE: GPT-5 AI Router Novel Vulnerability Class Exposes the Fatal Flaw in Multi-Model Architectures

Towards Secure AI Week 32 — NIST Control Overlays, OWASP Landscape, LLM Trustworthiness Scores, and GPT-5 Jailbreak

Towards Secure AI Week 31 — Gemini Smart Home Hijack, LLM Slopsquatting, GPT-5 Jailbreak, OWASP Landscape, and GenAI Data Exposure

Towards Secure AI Week 29 — America’s AI Action Plan, LLM Plugin Flaws, and Package Hallucination Risks

Blog categories

Explore Our Blog

LLM Security

LLM Security posts

A hole in every one: bypassing the open source AI skill scanners

The AI agent sandbox escape that breached Hugging Face: what happened, and what to fix

We broke GPT-5.4 safety with 10 examples and 2 words using a new attack technique — IICL

From chatbots to digital workers: Managing the business risks of agentic AI

Why chatbot red teaming won’t save you from agentic AI disasters

Security Risks of the Model Context Protocol: Can Autonomous Agents Handle Adversarial Testing? Conversation with ChatGPT, Claude, Grok & Deepseek

Towards Secure AI Week 33 — Lenovo Chatbot Breach, PROMISQROUTE in GPT-5, NIST AI Security Overlays, EU AI Priorities, and Grok Privacy Leak

Lenovo AI Chatbot Incident: Critical XSS Vulnerability Exposes Enterprise AI Security Gaps

PROMISQROUTE: GPT-5 AI Router Novel Vulnerability Class Exposes the Fatal Flaw in Multi-Model Architectures

Towards Secure AI Week 32 — NIST Control Overlays, OWASP Landscape, LLM Trustworthiness Scores, and GPT-5 Jailbreak

Towards Secure AI Week 31 — Gemini Smart Home Hijack, LLM Slopsquatting, GPT-5 Jailbreak, OWASP Landscape, and GenAI Data Exposure

Towards Secure AI Week 29 — America’s AI Action Plan, LLM Plugin Flaws, and Package Hallucination Risks

Blog categories

Explore Our Blog