Threat Model: articles and guides

A defensive explainer on attack vectors: what an attack vector is and how it differs from the attack surface, the most common vectors including phishing, stolen credentials, unpatched vulnerabilities, misconfigurations, supply-chain compromise, insiders and physical access, and how layered controls and reducing the attack surface defend against them.

As AI becomes operational infrastructure, attackers are developing reconnaissance techniques specifically targeting AI APIs, model endpoints, embedding stores, and training pipelines. Here's what the threat surface looks like.