Tag
7 articles tagged Access Control.
AI Security
Storm-0940 did not need a single user password: it signed in as a trusted vendor application. Here is what happened, what to check in your tenant, and how to shrink the access third-party apps hold.
AI Security
An agent that remembers can be taught to remember the wrong things. Treat every memory write as a privileged action with provenance, review, and an expiry date.
AI Security
A system prompt is configuration the user can probably read, not a vault. Here is what to move out of it, where to put it instead, and how to test that it stays out.
AI Security
A RAG system that searches one shared index for every user will eventually hand someone a document they were never allowed to read. Here is how to enforce access control at retrieval time.
AI Security
An AI agent in a GitHub Actions workflow reads attacker-controlled text while holding your tokens. Here is the threat model and a workflow design that keeps a successful prompt injection from reaching secrets.
AI Security
Connecting an MCP server hands its author a voice in your agent's context and, often, code execution on your machine. Here is how to review one before you connect it and keep it honest afterwards.
AI Security
Filters and stern system prompts reduce prompt injection, but they cannot eliminate it. The durable fix is to treat model output as untrusted input and authorize every action it proposes.
