Start here
Incident Response for AI Systems After the Hugging Face Breach
Following the autonomous AI-agent attack on Hugging Face, demand grows for an AI-specific incident playbook with observability, containment and verifiable evidence.
Topic
AI security: where AI systems are actually attacked
AI security is not an abstract risk register: it is prompt injection through documents and websites, agents with too many rights, and incidents that were only reconstructable because someone logged them. This hub follows the documented cases.
Start with the pillar article on prompt injection as an architectural problem, then read the articles on privileges, kill switches and incident response.
Start here
All articles in this topic 13 articles
July 21, 2026
AI Agents with Internal Access: Prompt Injection as an Insider Threat
Why AI agents with access to internal systems resemble an insider threat in 2026, and how architecture, least privilege and verifiable logs limit damage.
August 1, 2026
Data leaks between users and sessions are a design problem
A session-isolation flaw at Writer shows that leakage between users, projects and sessions in AI is an architecture problem, not just a prompt issue.
July 31, 2026
Indirect prompt injection via documents and websites in 2026
Hidden instructions in websites and documents can mislead AI systems. What NIST, Google, arXiv and OWASP report and what it means for workflows.
August 13, 2026
Kill switches for AI agents: from bill to concrete design
The AI Kill Switch Act makes emergency-stop capability for agentic AI concrete. What do a kill switch, rollback and circuit breaker really require of organisations?
August 21, 2026
Knowledge bases as an attack surface: why RAG poisoning is an architectural problem
A new study on medical multimodal RAG shows that poisoned knowledge bases can hijack retrieval. What that means for high-trust organisations.
August 11, 2026
Least privilege for AI agents becomes a design question in its own right
New guidance from Microsoft, CSA and OWASP describes how least privilege for AI agents requires its own identity, tool and audit architecture.
August 20, 2026
Prompt injection in AI agents is an architecture flaw, not a model bug
New research and NIST frameworks from 2026 show that prompt injection in AI agents is a structural architecture problem, from memory to tool permissions.
July 24, 2026
Prompt injection in AI agents: why architecture matters more than the model
Prompt injection in AI agents is an architecture and compliance problem. Why separated privileges, controlled memory and visible logs are needed.
August 4, 2026
Secrets management for AI workflows becomes a primary security layer
After the June 2026 LiteLLM vulnerabilities, secrets management in AI workflows proves core architecture rather than detail. What that means for professionals.
August 3, 2026
Shadow AI in 2026: from quietly tolerated habit to visible governance problem
Recent studies from Teramind, PagerDuty, Lenovo and Verizon show that shadow AI is mainly a visibility and data problem. What does that mean for control?
July 16, 2026
What the first major AI-agent incidents teach us about building safely
Peer-reviewed research dissects the first major AI-agent incidents: 900+ exposed gateways, 32,000 leaked keys. What this means for building safely with AI.
August 12, 2026
When AI Agents Started Breaking In: The Hugging Face Incident as a Turning Point for Data Breaches
The autonomous breach at Hugging Face shows that AI tools and agents themselves become an attack path. What this means for organisations with confidential data.