https://llmgaurd.si/blog/LLMGaurd researches and builds security for LLM and AI systems: guardrails, enterprise AI usage protection, and controlled red-team tooling. Thu, 01 Oct 2026 18:16:42 GMT https://llmgaurd.si/blog/carbonato-botnet-hermes-agent-docker/https://llmgaurd.si/blog/carbonato-botnet-hermes-agent-docker/Thu, 01 Oct 2026 08:00:00 GMTCARBONATO worms through exposed Docker daemons and plants an unmodified Hermes Agent, reprogrammed by a 39-line file to steal AI API keys via Telegram. https://llmgaurd.si/blog/shadow-ai-enterprise-data-leakage/https://llmgaurd.si/blog/shadow-ai-enterprise-data-leakage/Wed, 30 Sep 2026 08:00:00 GMTBanning AI tools pushes usage out of sight. A practical approach to visibility, data protection, and policy that lets teams use AI safely. https://llmgaurd.si/blog/indirect-prompt-injection-agents/https://llmgaurd.si/blog/indirect-prompt-injection-agents/Sat, 26 Sep 2026 08:00:00 GMTWhy agents that read emails, web pages, and documents can be steered by attackers who never talk to them, and the architecture patterns that limit the damage. https://llmgaurd.si/blog/owasp-top-10-llm-practitioners-guide/https://llmgaurd.si/blog/owasp-top-10-llm-practitioners-guide/Tue, 22 Sep 2026 08:00:00 GMTA practical walk through each risk in the OWASP LLM Top 10 (2025), what it looks like in real systems, and the first control worth adding.