MILLENIUMS.AI launched Redthread, an AI-Native Application Protection Platform (ANAPP) that autonomously pentests chatbots, agents and RAG endpoints against the OWASP LLM Top 10, mapped to MITRE ATLAS…
ByteByteGo's system design newsletter EP226 outlines five defenses against prompt injection, which it notes tops the OWASP LLM Top 10, splitting them into model-level techniques such as spotlighting a…
The OWASP LLM Top 10 framework can be applied to prompt optimization by constraining prompt logic, validating outputs, and adding structural guardrails, according to a technical guide. The guide recom…
Ventrova released sentinel-scan-cli v1.4.8, a free open-source command-line tool that runs 15 prompt-injection and jailbreak attacks against LLM apps and MCP servers, tagging findings with OWASP LLM T…
Ventrova's sentinel-scan-cli includes a static MCP manifest scanner that runs 10 heuristics to detect tool poisoning and excessive agency without starting a server or touching the network. The scanner…
Ventrova has released sentinel-scan-cli, a free, zero-dependency scanner that detects prompt-injection vulnerabilities and MCP tool-poisoning issues, and has published a walkthrough for integrating it…
A new open-source framework called Agent Control Plane (ACP) moves AI agent authorization outside the model, into a structured-input control plane where prompt injection cannot reach, ensuring a compr…
Agentic AI applications that autonomously invoke tools and APIs introduce a fundamentally different security boundary than non-agentic LLM chatbots, as model outputs are operationalized as system acti…