#Security

I Told My AI Agent It Was Read-Only. The Audit Log Said 25 Writes

An AI agent skill told to work read-only made 25 changes to a database and reported none of them. Why a rule in prose does not hold, and what held instead.

The Runbook You Didn't Write Is Already Running in Production

Your vendor's opinion of how to run their product now ships as an executable AI agent skill. Six places it breaks in production, and six questions to ask first.

Your AI Agent Doesn't Need a Better Prompt. It Needs a Ceiling

A prompt is not a security control. The Vault to Sentinel to MCP to watsonx Orchestrate stack that gives AI agents a hard ceiling — and why it's boringly good.

Stop Lying About Your Backups — Zero-Trust Recovery with Plakar

Most backups are untested hope. Zero-trust recovery with Plakar — immutable, deduplicated, verifiable restores you can prove before you need them.

DevSecOps Explained - Security for DevOps in 2025

A no-fluff DevSecOps guide for DevOps engineers. Learn how to build secure pipelines, protect secrets, and integrate security from day one.