Page 2 of 2.

Agentic AI security: when the LLM can act.

A chatbot that gives bad advice is a nuisance. An agent that acts on it – sends the email, deletes the file – is an incident. What changes.

MCP: the new attack surface for developers.

MCP makes it trivial to connect an LLM to your files, databases and APIs. That convenience is exactly the attack surface.

Deepfakes, explained.

How deepfake video and voice cloning are actually generated, why blink-and-lighting detection is losing ground, and how content provenance standards like C2PA aim to fix it.

Shadow AI, explained.

Employees pasting company data into consumer AI tools is the new shadow IT. How shadow AI creates real data-leak risk, and what governed AI use looks like.

AI and cryptography, explained.

AI can't break AES-256 or RSA-2048. What it can do: attack weak implementations and side channels. Plus the real entropy risk, and the 2024 post-quantum shift.