Tagged "security-best-practices"
13 articles tagged security-best-practices, 17 February 2026 to 31 July 2026. Newest first.
-
Ask HN: What are your rules for letting an AI agent commit code?
Community guidelines and best practices for safely deploying AI agents with code generation capabilities in production CI/CD pipelines.
-
Anthropic Secures Its AI-Native Software Development Lifecycle
Anthropic publishes security practices for AI-integrated development workflows, offering insights into safe deployment patterns for LLM-assisted coding and infrastructure.
-
I Gave My Local LLM Email Access Without Handing Over My Entire Inbox
A practical guide on securely integrating email capabilities with local LLMs while maintaining privacy and limiting data exposure. This approach demonstrates how to grant tool access to on-device models without compromising sensitive information.
-
Critical Out-of-Bounds Read Vulnerability Discovered in Ollama
A significant security vulnerability (CVE-2026-7482) has been identified in Ollama, affecting local LLM deployments. Users running self-hosted Ollama instances should prioritize updating to patched versions.
-
Ollama Vulnerability Exposes Remote Process Memory
A security vulnerability in Ollama has been disclosed that can expose remote process memory, highlighting important security considerations for users deploying Ollama locally or in networked environments.
-
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
A critical vulnerability in Ollama's GGUF parser enables remote attackers to read sensitive process memory, potentially exposing model weights and user data. This vulnerability affects all versions of Ollama and requires immediate patching for production deployments.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A severe memory leak vulnerability in Ollama has exposed approximately 300,000 servers to potential attacks. This critical security issue affects one of the most popular local LLM deployment platforms and requires immediate attention from operators running Ollama instances.
-
Critical Security Vulnerabilities in Ollama Auto-Updater Enable Remote Code Execution
Researchers discovered unpatched flaws in Ollama's auto-updater that could allow persistent remote code execution on local deployments. This affects a significant portion of self-hosted Ollama instances and highlights the importance of security practices in local LLM infrastructure.
-
NHS to Close-Source GitHub Repos Over AI and Security Concerns
The UK National Health Service restricts public access to code repositories citing AI model training and security risks, signaling institutional concerns about open-source exposure in sensitive domains.
-
Critical Security Flaw: Hackers Can Exploit Ollama Model Uploads to Leak Sensitive Server Data
A newly discovered vulnerability in Ollama allows attackers to exploit model uploads to extract sensitive information from local servers. This security issue highlights the importance of proper isolation and authentication when deploying LLMs locally.
-
Prompt Security Challenges Emerge as Critical Concern for Local LLM Deployments
Security researchers highlight prompt injection and adversarial prompt vulnerabilities as significant risks for locally deployed LLMs, requiring careful consideration of input validation and defensive measures in production inference systems.
-
I attacked my own LangGraph agent system. All 6 attacks worked
Security analysis of LangGraph-based AI agent systems, demonstrating multiple attack vectors against locally-deployed agentic systems and their implications for production deployments.
-
I broke into my own AI system in 10 minutes. I built it
Security researcher demonstrates critical vulnerabilities in self-built AI systems, highlighting the importance of hardening locally-deployed models against common attack vectors.