AI security

SiYuan fixes prompt-injection path to SSH keys and cloud credentials

CVE-2026-82233 shows how an AI agent’s ordinary upload tool can turn hidden instructions and an approved tool call into sensitive local-file exposure.

CVE-2026-82233 let SiYuan’s AI agent copy sensitive local files through MCP, showing why tool approvals need action-level policy.

Read article

A malicious repository could turn Amazon Kiro into a data-exfiltration path

A Kiro prompt-injection flaw shows how repository content can steer an AI coding agent towards sensitive files, configuration changes and data exfiltration.

Read article

The Hook Between Intent and Action

Promptective now supports Amp.

How Amp’s plugin architecture and Orb identity helped Promptective bring managed policy to direct prompts, tool calls and tool results.

Read news

LLM security in production

Safer inputs, retrieval, outputs and tools.

A practical guide to LLM security in production: control prompts, retrieval, outputs and tools; minimise sensitive evidence; test and respond.

Read guide

Securing AI agents with tools

Bound permissions and hold consequential actions for approval.

Learn how to reduce prompt injection, tool abuse, and MCP risks with practical controls for LLM agents and their connected systems.

Read guide

What is prompt injection?

How it works and how to reduce the risk.

Learn how prompt injection attacks work, see practical examples, and compare controls for protecting LLM applications in this 2026 guide.

Read guide