A developer's guide to AI red teaming in 2026 distinguishes between risk management frameworks like NIST AI 100-1 and practical tools such as garak, PyRIT, and promptfoo. The article emphasizes that f…
Microsoft's Python Risk Identification Tool (PyRIT) was archived on GitHub on March 27, 2026, making it read-only with no further updates. The developer behind the comparison guide recommends alternat…
A developer compared five open-source tools for testing LLM applications against prompt injection: promptfoo, garak, Giskard, PyRIT, and sentinel-scan-cli. The review found that promptfoo, Giskard, an…
GTK Cyber, a defense-focused cybersecurity training provider, has developed a course for the defense industrial base that teaches AI security in fully offline environments. The training addresses the …
NVIDIA's garak LLM vulnerability scanner v0.15.1 can be integrated into CI pipelines to automatically run jailbreak, prompt-injection, and encoding-bypass probes against LLM endpoints on every pull re…
A security researcher developed mcpscan, a static scanner for MCP servers and Claude Code projects, after discovering tool poisoning attacks that hide malicious instructions in Unicode zero-width char…
A developer maintaining bulwark-mcp, an open-source proxy that scans MCP tool results for indirect prompt injection, discovered that a class of attacks bypasses the detector by impersonating the secur…
An independent assessment by AIRQ (AI Risk Quadrant, 2026 Q2) found that only 11% of 100 evaluated commercial and publicly available AI agents met its security threshold, with many production agents r…