OpenAI Distillation Campaign: How CoT Extraction Works and How to Defend
OpenAI disrupted a coordinated chain-of-thought distillation campaign. How distillation attacks work, how to detect them, and API defenses.
MCP Server Security Architecture: Defending Model Context Protocol Tools (2026)
MCP server security architecture: tool poisoning, indirect prompt injection, OAuth 2.1, sandboxing, least privilege, and a defense-in-depth model for Model Context Protocol.
AI Model Supply Chain Security: SBOM, Signing, Provenance
AI model supply chain security in 2026: model SBOMs, signing and attestation, poisoned weights, registry trust, and provenance for the ML pipeline.
Agentic AI Security: Defeating Prompt Injection in 2026
An applied defense-in-depth pattern for agentic AI security: the indirect prompt injection kill-chain, OWASP LLM/Agentic Top 10, and layered mitigations.