Llm Security

A plain-English CISO read of CONTINUITY (arXiv:2609.05269): why individually correct LLM-agent security controls fail to compose, the "security-context discontinuity" failure mode, how CONTINUITY carries authenticated context across every boundary, and its result — zero harmful effects across 2,560 attack instances while completing all benign tasks and escalating every ambiguous case.

A CISO guide to the OWASP MCP Governance & Risk Project: the four non-negotiable gates (owner, logging, scope, review), the Tier 0-4 classification, the eight-factor risk model, and how it maps to the OWASP MCP Top 10, LLM Top 10, NIST AI RMF, ISO 42001 and SOC 2. Plus a free tool that runs the check for a specific server.

A CISO guide to abliterated models: how "abliteration" surgically removes an LLM's refusal behaviour without retraining, why refusal-removed offensive-security releases such as GLM-5.3-CYBERSECURITY-FP8 are spreading on Hugging Face, where the real risk sits (shadow AI on laptops and agents with tools), how to detect them in your environment, and a free calculator that scores the risk of a specific deployment.

As AI becomes operational infrastructure, attackers are developing reconnaissance techniques specifically targeting AI APIs, model endpoints, embedding stores, and training pipelines. Here's what the threat surface looks like.