#prompt-injection
11 posts tagged with #prompt-injection
Every article below is hand-written, technically reviewed, and focused on prompt-injection. Posts cover real-world architecture decisions, code-level implementation patterns, and trade-offs you'll only discover after shipping production systems.
Cybersecurity How to Stop Prompt Injection in Agent Web Search APIs [2026]
Web search tools turn every AI agent into a browser. Here’s a threat model and a safe reference design: allowlists, extraction, sandboxing, signed provenance, and citation rules.
Cybersecurity How to Build a Prompt Injection Scanner for RAG [2026]
A practical, reproducible way to scan retrieved RAG context for indirect prompt injection, benchmark false positives, and gate regressions in GitHub Actions without blocking your team all day.
Cybersecurity How to Stop Repo Prompt Injection in Coding Agents [2026]
Repo-level prompt injection turns “clone and ask the agent” into a supply-chain compromise. Here’s the threat model, a safe demo, and practical mitigations.
Cybersecurity How to Do Prompt Injection Regression Testing [2026 CI]
Your prompt-injection evals are probably overfit to cute synthetic prompts. Here’s a CI-ready regression suite that still catches indirect injection: seed corpora, adversarial transforms, canary secrets, and hard fail gates.
![claude code terminal laptop screen — illustration for article on Claude Code Security [2026]: Risks, Safe](https://img.kunalganglani.com/images/vzekdneq/production/ae489a760c8efd343421ac3a5e4b1f9b048acc2c-1200x675.webp?auto=format&fit=max&q=75&w=600)
Technology Claude Code Security [2026]: Risks, Safe Setup, Team Policy
Claude Code is safe only if you treat it like a junior engineer with terminal access. Here’s the 2026 playbook: permissions, sandboxing, egress controls, MCP allowlists, retention settings, and incident response.
Cybersecurity Agent-Specific Attack Surfaces Security [2026]: What AppSec Misses
Agents don’t just “generate text”. They read files, browse, call tools, and remember things. That breaks classic AppSec threat models. Here’s the agent-native one—and the mitigations you can actually ship.
Cybersecurity The Complete Guide to AI Security in 2026
AI and LLM security in 2026 spans prompt injection, supply chain attacks, agent control flow vulnerabilities, and model misuse. This complete guide maps every major threat vector and links to 26 in-depth breakdowns so you can defend your AI systems today.
Cybersecurity Advanced Prompt Injection Techniques 2026: 7 Attack Chains Beyond OWASP #1
Prompt injection graduated from academic curiosity to active exploit — with CVEs filed against GitHub Copilot, Claude Code, Cursor, and AWS Kiro in a single month. Here are the 7 advanced attack chains researchers are tracking and the only defense architecture with provable security.
Cybersecurity Indirect Prompt Injection in AI Agents: 10-Step Red-Team Checklist [2026]
Every major AI coding agent shipped with exploitable indirect prompt injection vulnerabilities in 2025. Here's the red-team checklist to find them in your own pipeline before attackers do.
![Vibe-Code Security Nightmares Nobody Warns About [2026]](https://img.kunalganglani.com/images/vzekdneq/production/cb128a771b8d2517230c7a80f5efd8373a68511f-1200x675.webp?auto=format&fit=max&q=75&w=600)
Cybersecurity Vibe-Code Security Nightmares Nobody Warns About [2026]
63% of AI-generated functions ship with a security vulnerability. Here's the OWASP-mapped breakdown of what vibe-coded apps get wrong — and the audit checklist that catches it before your users do.
Technology Prompt Injection in 2026: Still OWASP's Number One LLM Vulnerability
Prompt injection has held the #1 spot on OWASP's LLM Top 10 across every edition. Here's why it's unsolvable, how agentic AI made it worse, and what developers actually need to do about it.
Keep exploring
Close to this topic, not on this page.
