Bayanat audit by 7ASecurity
7ASecurity shares results of a Bayanat security audit: 32 working days, 7 work packages, 22 findings, 21 hardening recommendations, supply-chain review, threat model, and fix verification.
Month: September 2026
OWASP Top 10 for LLM Applications: How to Test Production AI Apps
The OWASP LLM Top 10 names ten specific risks in LLM-powered apps: prompt injection, data leakage, excessive agency, and seven more, each with its own attack pattern. Testing against these risks means chaining a planted instruction through to real data exposure or confirming that rate limits cap costs, rather than just documenting that they should. …
How to Choose Between AI Red Teaming and an AI Security Assessment
AI red teaming and AI penetration testing are not the same thing. AI penetration testing looks for every possible vulnerability to build a secure baseline. AI red teaming simulates a targeted attack to test your detection and response capabilities. Choose an AI security assessment based on your current operational maturity. People use the terms "AI …
Incus security audit by 7ASecurity
7ASecurity publishes an independent Incus audit: all 14 vulnerabilities and 14 of 17 hardening recommendations were resolved and independently verified.
API Penetration Testing Methodology: How Testers Structure the Engagement
API penetration testing methodology starts with scoping and endpoint mapping. From there, it moves through authentication, authorisation, and business logic testing. Findings then get mapped back to the OWASP API Security Top 10. This piece walks through that process from a tester's side. An API (Application Programming Interface) doesn't have a login page to click …
