4 min read
Vulnerabilities Threat actors embed prompt injection payloads in third-party LLM plugins and data sources to hijack AI agent actions, exfiltrate data, and pivot within enterprise environments.
All Articles
6 min read
Threat Actors A newly attributed state-sponsored threat actor is targeting AI development infrastructure to poison training datasets and embed persistent backdoors in deployed models.
5 min read
Defensive Techniques How to implement an AI Software Bill of Materials capturing base models, adapters, training datasets, and dependencies — and use it for supply chain risk and compliance.
5 min read
Research LLMs with large context windows can be reliably jailbroken by embedding hundreds of fictitious dialogues before the target request. The attack scales with context length.
4 min read
Vulnerabilities CVE-2026-31204: an SSRF vulnerability in Ollama allows local-network attackers to read arbitrary files and reach internal services via the model pull endpoint. All versions affected.