Supply Chain Security, in plain English.

OWASP Top 10 for LLM Applications: A First Look

OWASP published its first Top 10 for LLM Applications on August 1, 2023. Here is what it covers, where it overreaches, and how to use it on real systems.

Refusal Rate Analysis: Griffin AI vs Mythos

A security AI that refuses too often is useless. One that refuses too rarely is dangerous. Griffin AI publishes calibrated refusal benchmarks; Mythos does not.

Path Traversal: Griffin AI vs Mythos

Path traversal is the vulnerability class that punishes lazy analysis. Framework-specific path normalisation, OS-dependent separators, symbolic link resolution, and archive extraction all hide exploitable gaps behind code that looks defensive. Griffin's engine resolves path operations with actual semantics; Mythos reads the variable name and calls it a day.

Griffin AI vs Inflection Pi for Security Assistance

How to Set Your Git Username and Email (and Why It Matters for Security)

Your Git username and email stamp every commit you make. Here is how to configure them correctly across global and per-repo scopes, and why they matter for trust and audit.

Does GitHub Copilot Use Your Code? IP and Licensing Questions Answered

Does GitHub Copilot steal your code, or just learn patterns from it? The honest answer depends on which setting you're using, what plan you're on, and whether the suggestion it hands back matches code it was trained on.

Securing LLM Applications: The OWASP Top 10 for Large Language Models

OWASP released its Top 10 for LLM Applications in August 2023, providing the first standardized framework for understanding and mitigating risks in AI-powered software.

AI Hallucinations Meet Package Confusion: A New Class of Supply Chain Attack

When LLMs hallucinate package names that don't exist, attackers can register them. This supply chain attack vector is already being exploited in the wild.

Throughput At Scale: Griffin AI vs Mythos

Engine work parallelises cleanly. Model calls do not. We explain why Griffin AI's throughput scales with CPU while Mythos-class tools bottleneck on rate limits.