Security
Filed under
Enterprise MCP Auth: Agents Finally Get Service Accounts
SEP-1046 gives unattended agents a real OAuth story on MCP: client credentials with private_key_jwt. What it fixes, what it leaves open, and how to roll it out.
Why Your AI Pilot Died in Procurement
Most AI pilots do not fail on accuracy. They stall in security review and data processing agreements, because nobody scheduled the twelve weeks that follow.
Prompt Injection via Your Own Docs: The RAG Attack Surface
Your knowledge base is untrusted input. Retrieval hands attacker-authored text to the model, so the control that pays off is scanning at ingestion time.
M365 Security 101: AI Pilot and Business Impact Reports
Where AI earns its place in security: remediation behind a per-change approval gate, and reports leadership can act on. A 101 with Aether365 as the example.
Trust the Model, Audit the Binary
A coding agent's client is the most privileged binary on your machine. Claude Code's hidden prompt fingerprint shows why you audit it, not trust it.
IAM for LLM Apps: Least Privilege When the Caller Is a Model
When the caller is a model, least privilege still applies. Give each agent tool a scoped IAM role and a session policy, not one broad set of admin credentials.
Bedrock Guardrails Won't Save You From Prompt Injection
Amazon Bedrock Guardrails filter content, they do not authorize actions. Real prompt injection defense is input isolation, tool allowlists, and IAM scoping.