Least privilege

Your AI Isn’t the Problem. Your Infrastructure Is. — Jiachen Jiang, Coder

Your AI Isn’t the Problem. Your Infrastructure Is. — Jiachen Jiang, Coder

Jiachen Jiang uses three agent security incidents, the Replit production database deletion, a relayed banking compromise involving Copilot, and the Nx supply chain attack, to argue that prompts cannot enforce boundaries. He maps each incident to six infrastructure controls: environmental separation, short-lived scoped credentials, identity-aligned access, model proxies, sandboxing, and independent audit logs.

AI Privilege Escalation: Agentic Identity & Prompt Injection Risks

AI Privilege Escalation: Agentic Identity & Prompt Injection Risks

Grant Miller explains how malicious actors exploit AI systems through privilege escalation, using techniques like prompt injection to compromise over-permissioned AI agents. The summary covers key mitigation strategies, including the principle of least privilege, robust access governance, dynamic context-based access, and continuous monitoring to secure agentic systems.