Vietnam’s new digital and high-tech laws took effect on 1 July 2026 — a compliance read
The Law on Digital Transformation and the Law on High Technology came into force on 1 July 2026, following the Law on Artificial Intelligence in March. What changes operationally for enterprises deploying AI in Vietnam.
The agent governance gap: what to put in place before agents touch production
AI agents moved into production during 2026; governance did not follow. Agent governance is now being described as the new cybersecurity concern — here are the controls that actually matter.
Five prompt injection patterns most security teams aren't testing for
Direct injection is the easy one. The four patterns that get past production red-teams — indirect injection via retrieved documents, tool-call hijacking, multi-turn context manipulation, encoding tricks — are the ones worth running before you ship.
Building an LLM threat model: a 7-step framework for enterprise AI
STRIDE doesn’t fit. OWASP’s LLM Top 10 is a taxonomy, not a process. Compliance checklists ask the right questions for the wrong systems. A seven-step framework that produces a CISO-signable artifact and a runbook your engineering team will actually use.
Beyond prompt injection: data exfiltration risks in enterprise AI agents
Prompt injection is the entry point. The interesting question is what the agent does next. Four exfiltration patterns appear repeatedly in real enterprise AI agent deployments — each one has an architectural remediation, not a prompt-level one.
Showing 5 of 5 articles in Security.