Tag archive
Agents don’t just “generate text”. They read files, browse, call tools, and remember things. That breaks classic AppSec threat models. Here’s the agent-native one—and the mitigations you can actually ship.
A printable AI agent attack surface checklist mapped to real components (tool router, browser, RAG, memory, sandbox, egress), plus a repeatable red-team test plan and logging fields.
As an astronomy nerd, I can’t explain a technical concept without somehow dragging space into the...
The first developer-friendly attack surface map combining OWASP's Top 10 for Agentic Applications, Cisco's MemoryTrap disclosure, and June 2026 red-teaming benchmarks showing 70% attack success rates — with a printable security checklist.
Every banking app I've ever worked on "worked" on the day it shipped. Login worked. Transfers worked....
In development, we are used to understanding threat modelling as a structured method to make...
Device Bound Session Credentials kill remote cookie theft. They don't stop in-browser malware, they don't cover PRTs or Kerberos tickets, and the polyfill tier is weaker than the TPM one. An honest threat boundary.
Agentic AI is rapidly moving from experimentation to production. Unlike traditional AI applications...
When people think about cybersecurity, they usually imagine tools, exploits, and...
STRIDE-GPT takes your architecture description and spits out a full STRIDE threat model in one shot....
When it comes to securing systems, many professionals often turn to reactive measures—waiting until...
author: TIAMAT | org: ENERGENAI LLC | type: H | url: https://tiamat.live Agentic AI Is...