<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
    <channel>
      <title>AI Security Second Brain</title>
      <link>https://smith-mern.github.io/AISecuritySecondBrain</link>
      <description>Last 10 notes on AI Security Second Brain</description>
      <generator>Quartz -- quartz.jzhao.xyz</generator>
      <item>
    <title>Tag: 1326**</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/tags/1326**</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/tags/1326**</guid>
    <description><![CDATA[  ]]></description>
    <pubDate>Wed, 12 Aug 2026 12:50:39 GMT</pubDate>
  </item><item>
    <title>Tag Index</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/tags/</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/tags/</guid>
    <description><![CDATA[  ]]></description>
    <pubDate>Wed, 12 Aug 2026 12:50:39 GMT</pubDate>
  </item><item>
    <title>Agent Observability and Structured Logging</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agent-observability-and-logging</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agent-observability-and-logging</guid>
    <description><![CDATA[ A concrete implementation of agent audit trails — MCP client-side structured logging, a 14-field log schema, and SIEM/SOAR routing. The operational answer to T8 Repudiation & Untraceability, and the vault's first implementation-level detection source. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Agentic AI — Threats and Mitigations (OWASP ASI)</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-ai-threats-and-mitigations</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-ai-threats-and-mitigations</guid>
    <description><![CDATA[ Summary of the OWASP Agentic Security Initiative's first report, v1.1 (December 2025) — a threat-model-based reference for agentic AI covering 17 threats, 6 mitigation playbooks and 3 worked threat models. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Agentic Mitigation Playbooks</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-mitigation-playbooks</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-mitigation-playbooks</guid>
    <description><![CDATA[ OWASP's six mitigation playbooks for agentic AI, each split into proactive, reactive and detective steps and mapped to the threats it covers — plus an assessment of which controls are actually implementable. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Agentic AI Reference Architecture</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-reference-architecture</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-reference-architecture</guid>
    <description><![CDATA[ The single-agent and multi-agent component model OWASP uses as the canvas for agentic threat modelling, plus the nine agentic patterns it defines to standardise threat-modelling vocabulary. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Agentic Supply Chain Compromise (T17)</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-supply-chain</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-supply-chain</guid>
    <description><![CDATA[ Poisoned prompts, plugins, tool metadata and framework updates reaching a long-lived, autonomous agent — LLM03 amplified by statefulness and delegation. Added in v1.1, with two real 2025 incidents. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Agentic Threat Taxonomy (T1–T17)</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-threat-taxonomy</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/agentic-threat-taxonomy</guid>
    <description><![CDATA[ The OWASP Agentic Security Initiative's threat table — seventeen threats to agentic AI systems, each with a description, mitigation direction, and (where one exists) a mapping back to the OWASP Top 10 for LLM Applications. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Cascading Hallucination Attacks (T5)</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/cascading-hallucination</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/cascading-hallucination</guid>
    <description><![CDATA[ False information generated by an agent, then reinforced through its own memory, reflection or inter-agent communication until it becomes operative fact across a system. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item><item>
    <title>Context Failure Modes</title>
    <link>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/context-failure-modes</link>
    <guid>https://smith-mern.github.io/AISecuritySecondBrain/agentic-wiki/context-failure-modes</guid>
    <description><![CDATA[ The four ways an agent's context window fails — poisoning, distraction, confusion, clash — with measured effect sizes. The same mechanisms as T1, T5 and T2, documented as accidents rather than attacks. ]]></description>
    <pubDate>Thu, 30 Jul 2026 12:17:57 GMT</pubDate>
  </item>
    </channel>
  </rss>