Threat models and defenses for LLM applications and autonomous agents, grounded in current research.
Home › AI Security
Giving a language model tools, memory, and network access changes what a successful attack costs. A jailbroken chatbot produces bad text; a compromised agent takes actions. This category covers that shift — the OWASP Top 10 for LLM Applications, indirect prompt injection as the vector that turns retrieved content into instructions, Model Context Protocol and tool-poisoning risk at the protocol layer, and the broader agent threat model including the combination of private data, untrusted input, and an available exfiltration path.
The coverage tracks published research and vendor disclosures rather than speculation, and it is explicit about what remains unsolved. Prompt injection has no known complete fix; what exists is a set of layered mitigations — least-agency design, provenance-aware prompting, injection classifiers, human confirmation for irreversible actions — each closing part of the surface. Where a defense is partial or evadable, the guides say so instead of presenting it as a solution.
By Himanshu Borikar • 2026-08-20 • 14 min read
How autonomous AI agents get compromised — the lethal trifecta, indirect prompt injection, MCP supply-chain attacks — and the practical controls that actually contain them.
By Himanshu Borikar • 2026-08-20 • 11 min read
Why OWASP ranks indirect prompt injection as the top LLM risk, how the attack surface actually works, and an honest look at why current defenses fall short.
By Himanshu Borikar • 2026-07-22 • 15 min read
MCP Security is the discipline of protecting connections between AI agents, clients, and MCP servers from abuse, data leakage, and tool hijacking. Here is the full engineering guide, threat model, attack scenarios, and checklist.
By Himanshu Borikar • 2026-07-16 • 12 min read
Agentic AI refers to AI systems that can autonomously plan, reason, use tools, and execute multi-step tasks toward a goal, with minimal human intervention. Here is the complete engineering guide to the architecture, tools, and future of agentic AI.
By Himanshu Borikar • 2026-07-16 • 15 min read
Comprehensive 2026 security guide covering prompt injection, data poisoning, model denial of service, and defense patterns for production LLM deployments.