Least Privilege for LLM Tool Execution — Scope, Whitelist & HITL Guide
Least privilege for LLM tool execution: scope AI agent tool & API permissions with whitelists, read-only keys, HITL approval, and audit logs for production.
Cybersecurity
11 articles on "Cybersecurity" — implementation case studies, PoC design, and operational know-how on AI, DX, and security for executives and IT teams.
AllAI & Machine Learning(19)LLM Operations & RAG(17)AI Agents(14)DX(14)Cybersecurity(11)PoC Development(2)Developer Tools(4)Thailand Business(18)
AI Development Supply Chain Attacks 2026 — A Defense Guide Against Model Poisoning, Dependency Packages, and SaaS Breaches
Based on 2026 cases like Hugging Face model poisoning and SaaS breaches, this implementation guide covers AI BOM, least-privilege OAuth, and sensitive secret management for AI developers.
AI Agent Supply Chain Attack Defense Guide — Protective Implementation for MCP/Skill Distribution Channels
AI agents create new attack surfaces via MCP / Skills. An enterprise implementation guide covering MCP by-design vulnerabilities, malicious skill delivery, and SSRF mitigation.
AI Guardrails Implementation Guide — How to Design Safety Barriers for LLM Applications
Protect LLM apps from prompt injection & hallucinations. Learn guardrail design basics, input/output guards, evaluation, and multi-tenant operations from an implementation perspective.
Claude Mythos and Project Glasswing — How Companies Should Prepare for the Era When AI Uncovers Long-Dormant Bugs
Anthropic's Claude Mythos Preview & Project Glasswing redefine AI-driven vulnerability discovery. From OpenBSD's 27-yr bug to FreeBSD CVE-2026-4747—5 DevSecOps actions you can take now.
AES-256 Encryption Implementation Guide for Thailand PDPA Compliance — Key Management and Audit Readiness for AI Systems
Step-by-step guide to implementing Thailand PDPA "appropriate technical safeguards" with AES-256. Covers AI-specific encryption targets, key management, and audit log design.
What is AI Red Teaming? A Practical Guide to Finding LLM Vulnerabilities
Learn about AI red teaming: methods, tools & techniques to systematically uncover LLM vulnerabilities like prompt injection & jailbreaking for safer AI operations.
Closing the "Invisible Attack Vector" in AI Chat — An Implementation Guide to Preventing Prompt Injection via DB
Indirect prompt injection via DB in multi-tenant AI chat: identify 4 attack vectors, detect & sanitize 24 patterns across 3 categories, validated with 71 test cases. A practical implementation guide.
Thailand PDPA Compliance Checklist: Balancing Regulatory Requirements with AI Utilization
Checklist for leveraging AI while complying with Thailand's Personal Data Protection Act (PDPA). Key points for data collection, processing, and storage explained.
【2026】Latest Trends in AI Cybersecurity
As AI adoption accelerates, risks surge from AI-powered attacks and attacks on AI itself. Explore deepfakes, prompt injection, Shadow AI threats, and 3-layer defenses covering technology, operations, and governance.
What is WireGuard? A Complete Guide to How the Next-Gen VPN Works and How to Use It with Tailscale
WireGuard explained from the basics. Covers differences from IPsec/OpenVPN, managed services like Tailscale, and real use cases. Perfect for infra teams looking to reduce VPN operational overhead.
