Protecting systems, data and people as AI becomes part of everyday operations.
News briefing, 5 min read
GitHub code scanning can now flag indirect prompt injection, sensitive-data exposure and excessive agency in AI applications. Here is what the preview covers and how to use it without mistaking a scanner for a security programme.
AI security
Framework summary, 2 min read
ISO/IEC 42001 does not prescribe seven named documents; it requires controlled evidence that AI risks, responsibilities, and decisions are managed.
AI security
Video
Europe didn't ban AI. It ranked the harm — and the high-risk band is where most real systems actually live.
AI security
Framework summary, 2 min read
The Cloud Security Alliance's trait-based approach maps agent behavior and architectural choices to concrete security risks and controls.
AI security
Framework summary, 2 min read
The OWASP AI Exchange provides a lifecycle map for moving from AI governance and threat analysis to testing, operations, and residual-risk decisions.
AI security
Framework summary, 2 min read
NIST's attack taxonomy helps security teams connect adversary goals, access, lifecycle stages, and mitigations across predictive and generative AI.
AI security
Framework summary, 2 min read
Microsoft's experience across 100 generative-AI products shows why testing must follow real system risks, not a generic attack checklist.
AI security
Framework summary, 2 min read
OWASP's 2025 list shows that securing an LLM application requires architecture, testing, and development controls around the model.
AI security
Framework summary, 2 min read
NIST's Generative AI Profile extends the AI RMF with concrete actions for governance, data provenance, testing, and incident disclosure.
AI security
Framework summary, 2 min read
BaFin's central point is simple: AI security has to cover the whole decision process, not just the model.
AI security
Framework summary, 2 min read
Google's SAIF implementation guide turns six security principles into an organizational process for designing, deploying, and operating AI safely.
AI security
Framework summary, 2 min read
Google's one-page SAIF summary provides a useful executive test for whether AI security covers architecture, operations, and business risk.
AI security
Framework summary, 2 min read
The NIST AI RMF gives organizations a lifecycle structure for connecting AI governance, assets, architecture, measurement, and risk treatment.
AI security
Follow along wherever you read. No newsletter sign-up needed.