BURT CONSULTANTS
Topic

security

11 pieces tagged “security”.

Briefing

A practical AI security checklist for SMEs adopting ChatGPT-style tools.

Data leakage, prompt injection, shadow AI and AI-powered phishing are growing risks for SMEs. A short, practical checklist helps keep adoption safe.

aisecuritysmegovernance
3 min read
Briefing

AI-powered security audits: faster discovery, same human accountability.

Anthropic used Claude to inspect Firefox source code and identify 22 vulnerabilities over two weeks, showing how AI can accelerate security review without removing the need for expert judgment.

aisecurityvulnerability researchgovernance
2 min read
Briefing

OWASP's GenAI exploit roundup: a secure AI agent architecture checklist.

OWASP catalogued eight major AI and agentic security incidents in Q1 2026, including a Claude-assisted breach of Mexican government systems and a Flowise RCE.

aisecurityowaspagents
2 min read
Briefing

The 11 AI security risks every board should discuss in Q3 2026.

Cycode has identified 11 critical AI security risks, while most organisations still lack visibility into how AI is being used. Boards need to move AI security from IT to enterprise risk.

aisecuritygovernancerisk
2 min read
Briefing

How to operationalise AI-native security auditing without losing trust.

Trail of Bits has standardised on Claude Code, written an AI usage policy and created an AI Maturity Matrix, while AI-augmented auditors report finding around 200 bugs a week.

aisecurityauditinggovernance
2 min read
Briefing

Prompt injection and the agentic browser threat

Trail of Bits used threat modelling and prompt injection to audit Perplexity's Comet browser, demonstrating how an agentic browser could be manipulated into exfiltrating Gmail data.

aisecurityprompt injectiongovernance
3 min read
Briefing

Security debt as a board-level risk: a remediation playbook.

Veracode's 2026 State of Software Security report finds security debt affects 82% of organisations, with critical debt affecting 60% and high-risk vulnerabilities rising 36%.

securitytechnical debtgovernanceapplication security
2 min read
Briefing

OWASP's Agentic Skills Top 10: secure-by-design principles.

The OWASP Top 10 for agentic skills highlights prompt injection, tool misuse, supply chain compromise and human-agent trust exploitation as key risks.

owaspagentic aisecuritysecure by design
2 min read
Briefing

Agentic browsers are a new, unsolved attack surface

Wiz's year-end review of agentic browser security catalogues several practical attack techniques, from indirect prompt injection to CometJacking and Tainted Memories.

aisecuritybrowsergovernance
3 min read
Briefing

AI-generated code must pass the same bars as human code.

Trail of Bits argues that code produced by large language models should be reviewed with the same scepticism applied to a first-time contributor's pull request.

ai codingcode reviewsecuritysoftware engineering
2 min read
Briefing

A role-based strategy for adopting AI-assisted coding.

Real-world productivity gains from AI-assisted coding are typically 20–30% and are concentrated in mid-market teams, but security practices often lag behind.

ai codingdeveloper productivitymid-marketsecurity
2 min read

Browse all tags →