Library · topic
Security
Prompt injection, memory poisoning, and the agent-specific attack surface that appears the moment a model can act. The through-line: assume some attacks land, and design so a fooled model still can't do damage — least privilege, broken trifectas, and approval gates.
- Deep diveverified 2026-07-28
How do you defend an AI agent against memory poisoning?
Memory poisoning plants malicious content in an agent's long-term memory so it activates on a later task, often against a different user — unlike one-…
- Field noteverified 2026-07-14
Production coding agents
Coding agents should work in isolated, least-privilege sandboxes with repository-scoped credentials, network controls, resource limits, and explicit a…
- Field noteverified 2026-07-14
Agent-building frameworks are high-value RCE targets — Langflow's repeat CISA-KEV listings
Langflow — a popular open-source visual framework for building AI agents and RAG pipelines — has had multiple critical flaws added to CISA's Known Exp…