Enterprise AI Attack Chains: Prompt Injection, Tool Abuse, Detection
Technical analysis of enterprise AI attack chains: indirect prompt injection, memory poisoning, tool abuse, MCP exposure, and detection.
-
-
AI Threat Modeling: Trust Boundaries for RAG, Agents, and MCP
Advanced guide to AI threat modeling for RAG, agents, and MCP, with trust boundaries, context provenance, and identity separation.
-
Advanced Threat Modeling: Identities, Trust Boundaries, and Attack Chains
Advanced threat modeling in practice: identities, trust boundaries, SSRF, cloud metadata, delegated tokens, and blast radius across real attack chains.
-
Attacking Multi-Agent Systems: Rogue Agents and A2A
A practical AI Red Team guide to A2A reconnaissance, canary agent registration, agent-card spoofing, and delegation auditing in an authorized lab.
-
AI Recon: LLMs, RAGs, and Agents
Authorized reconnaissance for enterprise AI: map LLMs, RAG pipelines, agents, tools, IAM, APIs, cloud exposure, and evidence without drifting out of scope.
-
Autonomous Pentest Agent: AI, Red Team, and Attack Chains
Autonomous Pentest Agents can accelerate Red Team operations, but they also introduce risk around prompt injection, tool misuse, scope control, evidence quality, and detection.
-
Defensive Corporate OSINT: A Red Team Guide to Mapping Exposure, Identity, and Cloud
An advanced guide to defensive corporate OSINT from a Red Team perspective, covering identity, cloud, APIs, detection, and real attack chains.
