AI & Cybersecurity is a collection of articles on the intersection of artificial intelligence and information security. The posts cover two directions: AI applied to security tasks, such as threat detection, log analysis, vulnerability scanning, and automated code review, and the security of AI systems themselves, including prompt injection, data leakage, model and supply-chain risks, and the safe deployment of AI agents with access to tools and credentials.
- 1Everything We Know About PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
- 2Understanding the OWASP Guidance for LLM Applications
- 3How to Prevent Prompt Injection in Your AI Services
- 4AI-Discovered Vulnerabilities: Why Disclosure Timelines Are Getting Shorter
- 5The LiteLLM Supply-Chain Compromise: What the Injected Code Did and How to Check Your Deployment
- 6Infostealers Are Now Going After AI Coding Assistant Credentials
- 7Securing MCP Servers: Lessons from the Recent STDIO Injection CVEs
- 8When AI Agents Go Off-Script: What the OpenAI Monitor-Tampering Incidents Show
- 9Least Privilege for AI Agents: Why Shared Credentials Undermine Permission Policies