Llm Security

Anthropic’s Claude API and SDK can now emit OpenTelemetry spans for Messages API requests, tool uses and Managed Agents sessions (beta) — to any OTLP backend. For security and audit leaders that is the missing evidence layer: you cannot audit agent behaviour you never recorded. A third-party, docs-grounded read of what it traces (real span + attribute names), why it matters for AI audit and detection, and the one new data-exposure surface it opens — full-content spans that put prompts, tool results and PII into your observability stack.

Abliteration removes an open-weights LLM’s ability to refuse by deleting its "refusal direction" — not a jailbreak or a retrain. How to govern the risk.

A lab has released apex-flash-1, an open-weights model post-trained for cybersecurity, and framed offensive security as an economics problem: cheap capable models plus harnesses plus compute make finding and exploiting vulnerabilities a scaling exercise. The self-reported claims ($1M in bounties, #1 on the HackerOne US leaderboard, trillions of tokens a month) are the team’s own, but the trend they describe is corroborated by Anthropic’s own threat reports of largely-automated intrusion campaigns. What is claim vs. signal, why the cost-to-breach is falling, and the concrete playbook for a security leader when attack becomes industrialised.

When you give an LLM the ability to call tools and take actions, you grant it real capability. The controls that keep LLM tool access safe: least privilege, human approval, sandboxing and logging.

The Model Context Protocol lets AI agents call external tools and data through MCP servers. The governance controls that prevent an over-privileged or malicious MCP server becoming your next incident.

OWASP AISVS (AI Security Verification Standard) is a checklist of testable requirements for securing AI and LLM apps. What it covers and how to use it.

Baseten, Hugging Face and Goodfire are building safety infrastructure for open-weight models. A checklist of what a credible security standard needs.

Dolphin3-Cyber-8B, an abliterated "zero-refusals" security model, passed 44,000 downloads and runs on an 8GB laptop GPU. The AI governance checklist first.

Claude-Red packages 78 offensive-security skills for Claude, with no built-in authorization check. The governance checklist to put in place first.

VirusTotal released VTAI: a free, no-API-key MCP server and REST API letting AI coding agents check file, URL, domain and IP reputation. What the 7 tools actually do, the real limits, and what to know before wiring it into an agent.

Hours after DeepSeek-V4.1-Flash shipped, a community "abliterated" overlay stripping its safety refusals — including cybersecurity-specific ones — appeared on Hugging Face. What it actually is, how it works, and how to assess the risk if it shows up on your network.

Prompt injection explained for practitioners: direct vs. indirect attacks, why tool-calling agents make it worse, real attack patterns, and the defenses — treat tool output as data, scan it, and constrain what agents can do.

Why individually correct LLM-agent security controls still leak when composed — the "security-context discontinuity" failure mode across tool calls and agent boundaries, and how carrying authenticated context end-to-end fixes it. A plain-English CISO read of the CONTINUITY research (zero harmful effects across 2,560 attacks).

A CISO guide to the OWASP MCP Governance & Risk Project: the four non-negotiable gates (owner, logging, scope, review), the Tier 0-4 classification, the eight-factor risk model, and how it maps to the OWASP MCP Top 10, LLM Top 10, NIST AI RMF, ISO 42001 and SOC 2. Plus a free tool that runs the check for a specific server.

Abliterated models are LLMs with safety refusals surgically removed. What it means for your threat model, where the risk sits, and how to detect them.

As AI becomes operational infrastructure, attackers are developing reconnaissance techniques specifically targeting AI APIs, model endpoints, embedding stores, and training pipelines. Here's what the threat surface looks like.