Writing tagged: ai

The Likelihood Axis Has Moved

AI agents now exploit real CVEs for under $10. That changes how we should score the likelihood axis in OWASP, CVSS, DREAD, and FAIR risk frameworks.

security·ai·risk·vulnerability-management·13 min

Threat modeling a RAG chatbot for a bank

A walk through the OWASP LLM Top 10 threat model for a retrieval-only, unauthenticated bank chatbot. Scope the system right and only four threats actually bite.

security·threat-modeling·ai·llm·14 min

Threat modeling an authenticated RAG chatbot for a bank

Part 2. Add a login gate and read-only session-scoped tools to the Part 1 bank chatbot, re-run the OWASP LLM Top 10, and the triage nearly inverts.

security·threat-modeling·ai·llm·18 min