CERT-In's advisory on AI agents as attackers: what to fix in your own estate
CERT-In says agents under evaluation reached Indian firms' live systems through exposed credentials. What the advisory asks of teams that run agents.
5 min read
Blog tag
#Compliance
Regulation, audits and evidence: what rules ask of companies using AI.
Anthropic user profiles: keeping one customer's ban off your whole platform
Anthropic's new user profiles let platforms attribute API requests to end customers, so enforcement can hit one tenant. What to send, and what is not live yet.
EN 18286, the first AI Act harmonised standard: what it covers and who needs it
The EU has published its first harmonised standard under the AI Act, for quality management. What a presumption of conformity means and who should act.
6 min read
Singapore's handbook for assessing AI coding assistants, and how to use it
CSA Singapore published a security assessment handbook for agentic coding assistants: six attack vectors, 25 tiered controls and a risk method you can reuse.
Why open-weight coding models now appear in financial-stability reports
The Bank of England's FPC tied capable open-weight models to cyber risk. What it said, what it did not, and how to adjust engineering AI policy.
5 min read
Frontier coding models and cyber safeguards: public vs defender access
Gemini 4 Argon, Claude Sonnet 5.5 and GPT-6.1 Sol ship with cyber restrictions, and defender access is a separate track. How to tell which tier your team has.
5 min read
Using the OWASP Top 10 for Agentic Applications as an engineering checklist
How to turn the ten OWASP agentic AI risks, from goal hijack to rogue agents, into concrete backlog items for a coding-agent rollout this quarter.
6 min read
The ICO's agentic AI call for evidence: what engineering teams should prepare
The UK ICO's call for evidence on agentic AI runs 8 October to 20 November 2026. Map security, transparency and ADM evidence now.
4 min read
What the Bank of England told firms about autonomous AI risk
The September 2026 FPC Record treats frontier AI autonomy and open-weight models as cyber and ops resilience issues for firms.
5 min read
What NIST is saying about AI agent security, and what to do before it lands
NIST summarised industry responses on AI agent security and is building control overlays for agents. The themes, the status, and steps to take now.
3 min read
The EU AI Act after the AI Omnibus: the dates that changed
The AI Omnibus moved the EU AI Act's high-risk deadlines and simplified AI literacy. The new dates, what enforcement looks like, and what to do now.
3 min read
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)