Safeguard
Topic

AI Security

In-depth guides and analysis on ai security from the Safeguard engineering team.

779 articles

AI Security

Autonomous Security Remediation: The Promise and Peril of Self-Healing Software

Automated vulnerability patching sounds ideal until you consider what happens when the automation gets it wrong. Here's a realistic look at autonomous remediation.

Dec 15, 20236 min read
AI Security

AI Model Supply Chain Risks: Hugging Face and the New Attack Surface

As organizations download pre-trained models from Hugging Face and other model hubs, the AI supply chain introduces risks that traditional software security tools don't address.

Nov 20, 20235 min read
AI Security

The LLM Supply Chain: Risks Hiding in Foundation Models

Large language models have their own supply chains: training data, fine-tuning datasets, model weights, and serving infrastructure. Each layer introduces risk.

Nov 8, 20235 min read
AI Security

OWASP Top 10 for LLM Applications: A First Look

OWASP published its first Top 10 for LLM Applications on August 1, 2023. Here is what it covers, where it overreaches, and how to use it on real systems.

Sep 28, 20235 min read
AI Security

Securing LLM Applications: The OWASP Top 10 for Large Language Models

OWASP released its Top 10 for LLM Applications in August 2023, providing the first standardized framework for understanding and mitigating risks in AI-powered software.

Sep 25, 20235 min read
AI Security

AI Hallucinations Meet Package Confusion: A New Class of Supply Chain Attack

When LLMs hallucinate package names that don't exist, attackers can register them. This supply chain attack vector is already being exploited in the wild.

Sep 20, 20235 min read
AI Security

LLM Prompt Injection: The New Supply Chain Attack Vector

Prompt injection attacks against large language models represent a dangerous new frontier in software supply chain security. Here's what defenders need to know.

Aug 10, 20236 min read
AI Security

ChatGPT Plugins and the New Plugin Supply Chain Attack Surface

AI plugins connect LLMs to external services, creating a supply chain of trust that most users never examine. The risks are significant.

Jun 5, 20235 min read
AI Security

AI-Generated Code Security Risks: Copilot, ChatGPT, and the New Attack Surface

AI code assistants are writing a growing share of production code. The security implications are significant and largely unaddressed.

Mar 20, 20236 min read
AI Security

Securing AI/ML Pipelines: The Supply Chain You're Not Watching

AI/ML pipelines introduce unique supply chain risks from training data to model distribution. Most organizations have zero visibility into this attack surface.

Jan 20, 20236 min read
AI Security

ChatGPT and AI Security Implications for Software Supply Chains

The explosion of AI tools like ChatGPT is reshaping how developers write code — and introducing new supply chain risks that most teams aren't thinking about.

Jan 15, 20236 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

AI Security (Page 65) — Supply Chain Security Blog | Safeguard