[{"data":1,"prerenderedAt":1354},["ShallowReactive",2],{"blog-category-de-security":3},[4,80,151,209,252,357,439,523,597,658,706,767,821,875,933,982,1032,1084,1178,1214,1278],{"slug":5,"published":6,"minutes":7,"category":8,"tags":9,"tagPages":15,"keywords":18,"about":31,"sources":39,"cover":70,"og":71,"expertise":72,"locales":73,"lang":75,"title":77,"description":78,"coverAlt":79},"llm-output-guardrails-moderation","2026-10-17",13,"security",[10,11,12,13,14],"LLM security","Guardrails","Content moderation","OWASP","Output validation",[16,17],"llm-security","guardrails",[19,20,21,22,23,24,25,26,27,28,29,30],"llm output-guardrails","unsichere llm-ausgabe verarbeitung","owasp llm05 ausgabe-prüfung","openai moderation api nutzen","omni-moderation-latest modell","llama guard 4 test","nemo guardrails streaming ausgabe","markdown-bild exfiltration","llm-ausgabe html bereinigen","groundedness-prüfung","llm content moderation produktion","output rails nemo",[32,34,37],{"name":12,"url":33},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FContent_moderation",{"name":35,"url":36},"Cross-site scripting","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FCross-site_scripting",{"name":13,"url":38},"https:\u002F\u002Fowasp.org\u002F",[40,43,46,49,52,55,58,61,64,67],{"title":41,"url":42},"OWASP GenAI Security Project: LLM05:2025 Improper Output Handling","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm052025-improper-output-handling\u002F",{"title":44,"url":45},"OpenAI API Docs: Moderation","https:\u002F\u002Fplatform.openai.com\u002Fdocs\u002Fguides\u002Fmoderation",{"title":47,"url":48},"Meta: Llama Guard 4 model card and prompt formats","https:\u002F\u002Fwww.llama.com\u002Fdocs\u002Fmodel-cards-and-prompt-formats\u002Fllama-guard-4\u002F",{"title":50,"url":51},"NVIDIA NeMo Guardrails: Output rail streaming configuration","https:\u002F\u002Fdocs.nvidia.com\u002Fnemo\u002Fguardrails\u002Fconfigure-guardrails\u002Fyaml-schema\u002Fstreaming\u002Foutput-rail-streaming.md",{"title":53,"url":54},"Microsoft Learn: Prompt Shields in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fjailbreak-detection",{"title":56,"url":57},"Microsoft Learn: Groundedness detection in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fgroundedness",{"title":59,"url":60},"Microsoft Learn: Protected material detection in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fprotected-material",{"title":62,"url":63},"Guardrails AI documentation","https:\u002F\u002Fwww.guardrailsai.com\u002Fdocs",{"title":65,"url":66},"Vue.js docs: Security best practices","https:\u002F\u002Fvuejs.org\u002Fguide\u002Fbest-practices\u002Fsecurity.html",{"title":68,"url":69},"Simon Willison: Remote prompt injection in GitLab Duo leads to source code theft","https:\u002F\u002Fsimonwillison.net\u002F2025\u002FMay\u002F23\u002Fremote-prompt-injection-in-gitlab-duo\u002F","\u002Fimages\u002Fblog\u002Fllm-output-guardrails-moderation\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fllm-output-guardrails-moderation\u002Fog.jpg","ai-engineer",[74,75,76],"en","de","hu","Output-Guardrails für LLMs: Moderation, sicheres Rendern und Validierung, bevor etwas passiert","Output-Guardrails für LLMs: sicheres Markdown-Rendering, Schema-Prüfung vor Aktionen, Moderations-Klassifikatoren, Streaming und Groundedness.","Output-Guardrails: Wasser aus dem Hahn läuft durch einen Filter in ein sauberes Glas, oben bleiben Kiesel hängen.",{"slug":81,"published":6,"minutes":82,"category":8,"tags":83,"tagPages":87,"keywords":88,"about":100,"sources":108,"cover":145,"og":146,"expertise":72,"locales":147,"lang":75,"title":148,"description":149,"coverAlt":150},"ai-red-teaming-checklist-llm-apps",12,[84,10,13,85,86],"AI red teaming","promptfoo","Penetration testing",[16],[89,90,91,92,93,94,95,96,97,98,99],"ki red teaming checkliste","llm red teaming anleitung","red teaming llm-anwendungen","owasp genai red teaming leitfaden","promptfoo red team","garak llm scanner","pyrit red teaming","llm penetrationstest","owasp top 10 llm 2025 testen","jailbreak tests llm-app","red team rag-chatbot",[101,104,107],{"name":102,"url":103},"Red team","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FRed_team",{"name":105,"url":106},"Prompt injection","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPrompt_injection",{"name":13,"url":38},[109,112,115,118,121,124,127,130,133,136,139,142],{"title":110,"url":111},"OWASP GenAI Security Project: GenAI Red Teaming Guide (January 2025)","https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fgenai-red-teaming-guide\u002F",{"title":113,"url":114},"OWASP GenAI Security Project: Top 10 for LLM Applications 2025","https:\u002F\u002Fgenai.owasp.org\u002Fllm-top-10\u002F",{"title":116,"url":117},"Bullwinkel et al. (Microsoft): Lessons From Red Teaming 100 Generative AI Products (2025)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2501.07238",{"title":119,"url":120},"NIST AI 600-1: Generative Artificial Intelligence Profile (July 2024)","https:\u002F\u002Fnvlpubs.nist.gov\u002Fnistpubs\u002Fai\u002FNIST.AI.600-1.pdf",{"title":122,"url":123},"Promptfoo Docs: Red team quickstart","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fquickstart\u002F",{"title":125,"url":126},"Promptfoo Docs: Red team configuration","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fconfiguration\u002F",{"title":128,"url":129},"Promptfoo Docs: Red team plugins","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fplugins\u002F",{"title":131,"url":132},"Promptfoo Docs: Red team strategies","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fstrategies\u002F",{"title":134,"url":135},"NVIDIA garak: LLM vulnerability scanner (GitHub)","https:\u002F\u002Fgithub.com\u002FNVIDIA\u002Fgarak",{"title":137,"url":138},"Microsoft PyRIT documentation","https:\u002F\u002Fmicrosoft.github.io\u002FPyRIT\u002F",{"title":140,"url":141},"EU AI Act, Article 55: Obligations for providers of GPAI models with systemic risk","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F55\u002F",{"title":143,"url":144},"OWASP GenAI LLM Top 10 2026: final entries (GitHub)","https:\u002F\u002Fgithub.com\u002FGenAI-Security-Project\u002FGenAI-LLM-Top10\u002Ftree\u002Fmain\u002F2026\u002Ffinal","\u002Fimages\u002Fblog\u002Fai-red-teaming-checklist-llm-apps\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fai-red-teaming-checklist-llm-apps\u002Fog.jpg",[74,75,76],"AI-Red-Teaming-Checkliste für LLM-Apps: was man angreifen sollte, bevor es Nutzer tun","Red-Teaming-Checkliste für LLM-Apps, bevor es Nutzer tun: Scope, OWASP-2025-Testfälle, promptfoo, garak, PyRIT, menschliche Tester und Regressionstests.","AI-Red-Teaming-Checkliste: Eine Person mit Helm und Checkliste steht vor einem Burgtor, daneben ein Rammbock.",{"slug":152,"published":153,"minutes":154,"category":8,"tags":155,"tagPages":161,"keywords":163,"about":174,"sources":184,"cover":203,"og":204,"expertise":72,"locales":205,"lang":75,"title":206,"description":207,"coverAlt":208},"slopsquatting-ai-package-hallucinations","2026-10-16",6,[156,157,158,159,160],"Supply chain security","Coding agents","npm","PyPI","Package hallucination",[162],"coding-agents",[164,165,166,167,168,169,170,171,172,173],"slopsquatting","paket-halluzinationen ki","ki halluzinierte pakete","llm paket-verwechslung angriff","coding-agent lieferkettensicherheit","npm min-release-age einrichten","pnpm minimumreleaseage einstellen","uv exclude-newer einstellen","npm ignore-scripts erklärt","huggingface-cli halluziniertes paket",[175,178,181],{"name":176,"url":177},"Typosquatting","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FTyposquatting",{"name":179,"url":180},"Supply chain attack","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSupply_chain_attack",{"name":182,"url":183},"Hallucination (artificial intelligence)","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FHallucination_(artificial_intelligence)",[185,188,191,194,197,200],{"title":186,"url":187},"Spracklen et al.: We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs (2024)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2406.10279",{"title":189,"url":190},"Lasso Security, Bar Lanyado: Diving Deeper into AI Package Hallucinations (Mar 2024)","https:\u002F\u002Fwww.lasso.security\u002Fblog\u002Fai-package-hallucinations",{"title":192,"url":193},"npm Docs: config (min-release-age, before, ignore-scripts, allow-scripts)","https:\u002F\u002Fdocs.npmjs.com\u002Fcli\u002Fv11\u002Fusing-npm\u002Fconfig",{"title":195,"url":196},"pnpm: Dependency resolution settings (minimumReleaseAge)","https:\u002F\u002Fpnpm.io\u002Fsettings\u002Fdependency-resolution",{"title":198,"url":199},"uv: Settings reference (exclude-newer, require-hashes)","https:\u002F\u002Fdocs.astral.sh\u002Fuv\u002Freference\u002Fsettings\u002F",{"title":201,"url":202},"pip documentation: Secure installs and hash-checking mode","https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Ftopics\u002Fsecure-installs\u002F","\u002Fimages\u002Fblog\u002Fslopsquatting-ai-package-hallucinations\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fslopsquatting-ai-package-hallucinations\u002Fog.jpg",[74,75,76],"Slopsquatting: wenn Coding-Agenten Pakete installieren, die es nicht gibt","Wie LLMs Paketnamen halluzinieren, wie Angreifer sie registrieren und welche Registry-, Lockfile- und Agenten-Kontrollen die Installation stoppen.","Slopsquatting: Ein Roboter greift nach einem hohlen Paket mit Haken, ein echtes Paket steht dahinter.",{"slug":210,"published":153,"minutes":154,"category":8,"tags":211,"tagPages":215,"keywords":216,"about":227,"sources":233,"cover":246,"og":247,"expertise":72,"locales":248,"lang":75,"title":249,"description":250,"coverAlt":251},"rag-poisoning-knowledge-base-attacks",[212,213,105,13,214],"RAG security","Data poisoning","Vector database",[],[217,218,219,220,221,222,223,224,225,226],"rag poisoning angriff","wissensbasis vergiften","poisonedrag paper","rag-sicherheit","indirekte prompt injection im rag","owasp llm08 rag","vektordatenbank sicherheit","rag daten-poisoning abwehren","versteckter text prompt injection","sichere rag-ingestion",[228,231,232],{"name":229,"url":230},"Retrieval-augmented generation","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FRetrieval-augmented_generation",{"name":105,"url":106},{"name":13,"url":38},[234,237,240,243],{"title":235,"url":236},"Zou et al.: PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models (2024)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2402.07867",{"title":238,"url":239},"Greshake et al.: Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection (2023)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2302.12173",{"title":241,"url":242},"OWASP Gen AI Security Project: LLM08:2025 Vector and Embedding Weaknesses","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm082025-vector-and-embedding-weaknesses\u002F",{"title":244,"url":245},"OWASP Gen AI Security Project: LLM04:2025 Data and Model Poisoning","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm042025-data-and-model-poisoning\u002F","\u002Fimages\u002Fblog\u002Frag-poisoning-knowledge-base-attacks\u002Fcover.webp","\u002Fimages\u002Fblog\u002Frag-poisoning-knowledge-base-attacks\u002Fog.jpg",[74,75,76],"RAG-Poisoning: wie wenige Dokumente einen Assistenten steuern und wie man die Wissensbasis verteidigt","RAG-Poisoning: wie Angreifer Dokumente platzieren, die RAG-Systeme finden, was PoisonedRAG und OWASP zeigen und welche Kontrollen helfen.","RAG-Poisoning: Eine Hand deckt einen Brunnen ab, über dem ein Fläschchen tropft.",{"slug":253,"published":254,"minutes":255,"category":8,"tags":256,"tagPages":262,"keywords":265,"about":274,"sources":284,"cover":351,"og":352,"expertise":72,"locales":353,"lang":75,"title":354,"description":355,"coverAlt":356},"coding-agent-secrets-hygiene","2026-10-08",11,[257,258,259,260,261],"AI agents","Secrets management","Claude Code","Pre-commit scanning","CI security",[263,264],"ai-agents","claude-code",[266,267,268,269,270,271,272,273],"secrets coding-agenten","secrets vor ki-agenten schützen","claude code .env sperren","gitleaks pre-commit einrichten","github push-schutz secrets","oidc github actions kurzlebige zugangsdaten","geleakten api-key rotieren","mcp server token-scope",[275,278,281],{"name":276,"url":277},"Principle of least privilege","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPrinciple_of_least_privilege",{"name":279,"url":280},"Model Context Protocol","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FModel_Context_Protocol",{"name":282,"url":283},"Git","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FGit",[285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348],{"title":286,"url":287},"Claude Code: permissions","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fpermissions",{"title":289,"url":290},"Claude Code: sandboxed Bash","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fsandboxing",{"title":292,"url":293},"Claude Code: hooks","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fhooks",{"title":295,"url":296},"Claude Code: data usage","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fdata-usage",{"title":298,"url":299},"Claude Code: settings","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fsettings",{"title":301,"url":302},"Claude Code: MCP servers","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fmcp",{"title":304,"url":305},"Codex: configuration reference","https:\u002F\u002Fdevelopers.openai.com\u002Fcodex\u002Fconfig-reference",{"title":307,"url":308},"Codex: agent approvals and security","https:\u002F\u002Flearn.chatgpt.com\u002Fdocs\u002Fagent-approvals-security",{"title":310,"url":311},"Codex: advanced configuration","https:\u002F\u002Flearn.chatgpt.com\u002Fdocs\u002Fconfig-file\u002Fconfig-advanced",{"title":313,"url":314},"GitHub: about push protection","https:\u002F\u002Fdocs.github.com\u002Fen\u002Fcode-security\u002Fsecret-scanning\u002Fintroduction\u002Fabout-push-protection",{"title":316,"url":317},"GitHub: security hardening with OIDC","https:\u002F\u002Fdocs.github.com\u002Fen\u002Factions\u002Fsecurity-for-github-actions\u002Fsecurity-hardening-your-deployments\u002Fabout-security-hardening-with-openid-connect",{"title":319,"url":320},"GitHub: OpenID Connect reference","https:\u002F\u002Fdocs.github.com\u002Fen\u002Factions\u002Freference\u002Fsecurity\u002Foidc",{"title":322,"url":323},"GitHub: using secrets in Actions","https:\u002F\u002Fdocs.github.com\u002Fen\u002Factions\u002Fsecurity-guides\u002Fusing-secrets-in-github-actions",{"title":325,"url":326},"GitHub: secure use reference","https:\u002F\u002Fdocs.github.com\u002Fen\u002Factions\u002Fsecurity-for-github-actions\u002Fsecurity-guides\u002Fsecurity-hardening-for-github-actions",{"title":328,"url":329},"GitHub: removing sensitive data","https:\u002F\u002Fdocs.github.com\u002Fen\u002Fauthentication\u002Fkeeping-your-account-and-data-secure\u002Fremoving-sensitive-data-from-a-repository",{"title":331,"url":332},"gitleaks: README and latest release","https:\u002F\u002Fgithub.com\u002Fgitleaks\u002Fgitleaks",{"title":334,"url":335},"TruffleHog: README","https:\u002F\u002Fgithub.com\u002Ftrufflesecurity\u002Ftrufflehog",{"title":337,"url":338},"detect-secrets: README and latest release","https:\u002F\u002Fgithub.com\u002FYelp\u002Fdetect-secrets",{"title":340,"url":341},"Model Context Protocol: security best practices","https:\u002F\u002Fmodelcontextprotocol.io\u002Fspecification\u002F2025-06-18\u002Fbasic\u002Fsecurity_best_practices",{"title":343,"url":344},"OWASP: Secrets Management Cheat Sheet","https:\u002F\u002Fcheatsheetseries.owasp.org\u002Fcheatsheets\u002FSecrets_Management_Cheat_Sheet.html",{"title":346,"url":347},"OWASP: LLM02 sensitive information disclosure","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm022025-sensitive-information-disclosure\u002F",{"title":349,"url":350},"Git: git-add documentation","https:\u002F\u002Fgit-scm.com\u002Fdocs\u002Fgit-add","\u002Fimages\u002Fblog\u002Fcoding-agent-secrets-hygiene\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fcoding-agent-secrets-hygiene\u002Fog.jpg",[74,75,76],"Coding-Agenten und Secrets: Schlüssel aus Kontext, Logs und Commits","Wie Secrets über Coding-Agenten abfließen und welche Kontrollen sie stoppen: Deny-Regeln, Sandbox, Pre-Commit-Scans, Push-Schutz, OIDC und Rotation.","Secrets bei Coding-Agenten: Ein Roboter tippt am Laptop neben einem Schlüssel in einer verschlossenen Glasbox.",{"slug":358,"published":359,"updated":360,"minutes":255,"category":8,"tags":361,"tagPages":367,"keywords":369,"about":378,"sources":391,"cover":433,"og":434,"expertise":72,"locales":435,"lang":75,"title":436,"description":437,"coverAlt":438},"works-council-ai-tools-austria-germany","2026-10-02","2026-10-10",[362,363,364,365,366],"Works council","AI coding tools","Employee monitoring","GDPR","Co-determination",[368],"gdpr",[370,371,372,373,374,375,376,377],"betriebsrat ki-tools","ki coding-tools betriebsrat","mitbestimmung ki-einführung","§ 87 betrvg leistungsüberwachung","§ 96 arbvg kontrollmaßnahmen erklärt","ki-nutzungsprotokolle mitarbeiterüberwachung","betriebsvereinbarung ki-tools","dsgvo artikel 88 beschäftigtendaten",[379,382,385,388],{"name":380,"url":381},"General Data Protection Regulation","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2016\u002F679\u002Foj\u002Feng",{"name":383,"url":384},"EU Artificial Intelligence Act (Regulation (EU) 2024\u002F1689)","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj\u002Feng",{"name":386,"url":387},"Arbeitsverfassungsgesetz (Austrian Labour Constitution Act)","https:\u002F\u002Fwww.ris.bka.gv.at\u002FGeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10008329",{"name":389,"url":390},"Betriebsverfassungsgesetz (German Works Constitution Act), § 87","https:\u002F\u002Fwww.gesetze-im-internet.de\u002Fbetrvg\u002F__87.html",[392,394,396,399,402,404,407,409,412,415,418,421,424,427,430],{"title":393,"url":387},"Arbeitsverfassungsgesetz (ArbVG), §§ 96 and 96a, consolidated text of 10 October 2026, RIS",{"title":395,"url":390},"Betriebsverfassungsgesetz (BetrVG), § 87, gesetze-im-internet.de",{"title":397,"url":398},"Betriebsverfassungsgesetz (BetrVG), § 90, gesetze-im-internet.de","https:\u002F\u002Fwww.gesetze-im-internet.de\u002Fbetrvg\u002F__90.html",{"title":400,"url":401},"Bundesdatenschutzgesetz (BDSG), § 26, gesetze-im-internet.de","https:\u002F\u002Fwww.gesetze-im-internet.de\u002Fbdsg_2018\u002F__26.html",{"title":403,"url":381},"Regulation (EU) 2016\u002F679 (GDPR), EUR-Lex",{"title":405,"url":406},"GDPR Article 5(1)(e), storage limitation, gdpr-info.eu","https:\u002F\u002Fgdpr-info.eu\u002Fart-5-gdpr\u002F",{"title":408,"url":384},"Regulation (EU) 2024\u002F1689 (AI Act), EUR-Lex",{"title":410,"url":411},"Regulation (EU) 2026\u002F1744, EUR-Lex","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2026\u002F1744\u002Foj",{"title":413,"url":414},"AI Act Article 26, AI Act Explorer","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F26\u002F",{"title":416,"url":417},"AI Act Annex III, AI Act Explorer","https:\u002F\u002Fartificialintelligenceact.eu\u002Fannex\u002F3\u002F",{"title":419,"url":420},"BAG, 1 ABR 16\u002F23 (July 2024), headset system, gesetze.co","https:\u002F\u002Fgesetze.co\u002Furteile\u002F1_ABR_16-23",{"title":422,"url":423},"ArbG Hamburg, 24 BVGa 1\u002F24: law-firm summary by CMS","https:\u002F\u002Fcms.law\u002Fde\u002Fdeu\u002Flegal-updates\u002Fkein-mitbestimmungsrecht-des-betriebsrats-bei-chatgpt-co",{"title":425,"url":426},"ArbG Hamburg, 24 BVGa 1\u002F24: law-firm summary by Gleiss Lutz","https:\u002F\u002Fwww.gleisslutz.com\u002Fde\u002Fknow-how\u002Farbeitsgericht-hamburg-zu-chatgpt-kein-mitbestimmungsrecht-des-betriebsrats",{"title":428,"url":429},"Claude Code documentation: monitoring usage","https:\u002F\u002Fcode.claude.com\u002Fdocs\u002Fen\u002Fmonitoring-usage",{"title":431,"url":432},"GitHub Docs: Copilot metrics data reference","https:\u002F\u002Fdocs.github.com\u002Fen\u002Fcopilot\u002Freference\u002Fmetrics-data","\u002Fimages\u002Fblog\u002Fworks-council-ai-tools-austria-germany\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fworks-council-ai-tools-austria-germany\u002Fog.jpg",[74,75,76],"KI-Coding-Tools und Betriebsrat: wann Nutzungsprotokolle als Überwachung gelten","Nutzungsprotokolle können ein KI-Tool zum Überwachungssystem machen. Was § 96 ArbVG und § 87 BetrVG verlangen und was du vor dem Rollout klären solltest.","KI-Coding-Tools und Betriebsrat: Ein Besprechungstisch mit Laptop, darüber eine abgedeckte Wandkamera.",{"slug":440,"published":359,"minutes":82,"category":8,"tags":441,"tagPages":446,"keywords":447,"about":458,"sources":468,"cover":517,"og":518,"expertise":72,"locales":519,"lang":75,"title":520,"description":521,"coverAlt":522},"eu-ai-act-gpai-high-risk-2026",[442,443,444,445],"EU AI Act","GPAI","High-risk AI","AI compliance",[],[448,449,450,451,452,453,454,455,456,457],"eu ai act hochrisiko frist","digital omnibus ki-verordnung hochrisiko","ai act gpai pflichten","ai act anbieter vs betreiber","eu ai act 2. dezember 2027","gpai verhaltenskodex","ki-kompetenz artikel 4","ai act compliance checkliste","ai act openai api anbieter betreiber","ai act mittelständische unternehmen",[459,462,465],{"name":460,"url":461},"Artificial Intelligence Act","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FArtificial_Intelligence_Act",{"name":463,"url":464},"General-purpose artificial intelligence","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FFoundation_model",{"name":466,"url":467},"European Commission","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FEuropean_Commission",[469,471,473,476,479,482,485,488,491,494,496,499,502,505,508,511,514],{"title":408,"url":470},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj",{"title":472,"url":411},"Regulation (EU) 2026\u002F1744 (Digital Omnibus on AI), EUR-Lex",{"title":474,"url":475},"AI Act Explorer: Digital Omnibus on AI, full amending text","https:\u002F\u002Fartificialintelligenceact.eu\u002Fai-act-explorer\u002Fdigital-omnibus\u002F",{"title":477,"url":478},"European Commission: AI Act regulatory framework and timeline","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Fpolicies\u002Fregulatory-framework-ai",{"title":480,"url":481},"European Commission: Guidelines for providers of general-purpose AI models","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Fpolicies\u002Fguidelines-gpai-providers",{"title":483,"url":484},"European Commission: Q&A on the guidelines for GPAI providers","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Ffaqs\u002Fguidelines-obligations-general-purpose-ai-providers",{"title":486,"url":487},"European Commission: The General-Purpose AI Code of Practice","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Fpolicies\u002Fcontents-code-gpai",{"title":489,"url":490},"European Commission: AI literacy Questions and Answers","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Ffaqs\u002Fai-literacy-questions-answers",{"title":492,"url":493},"AI Act Article 25: Responsibilities along the AI value chain","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F25\u002F",{"title":495,"url":414},"AI Act Article 26: Obligations of deployers of high-risk AI systems",{"title":497,"url":498},"AI Act Article 27: Fundamental rights impact assessment","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F27\u002F",{"title":500,"url":501},"AI Act Article 53: Obligations for providers of general-purpose AI models","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F53\u002F",{"title":503,"url":504},"AI Act Article 99: Penalties","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F99\u002F",{"title":506,"url":507},"AI Act Article 101: Fines for providers of general-purpose AI models","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F101\u002F",{"title":509,"url":510},"Gibson Dunn: EU AI Act Omnibus Agreement, postponed high-risk deadlines (27 May 2026)","https:\u002F\u002Fwww.gibsondunn.com\u002Feu-ai-act-omnibus-agreement-postponed-high-risk-deadlines-and-other-key-changes\u002F",{"title":512,"url":513},"Orrick: EU AI Act Update, Digital Omnibus finalizes 8 compliance changes (29 July 2026)","https:\u002F\u002Fwww.orrick.com\u002Fen\u002FInsights\u002F2026\u002F07\u002FEU-AI-Act-Update-Digital-Omnibus-Finalizes-8-Compliance-Changes",{"title":515,"url":516},"K&L Gates: EU Digital Omnibus on AI enters into force (31 July 2026)","https:\u002F\u002Fwww.klgates.com\u002FEU-Digital-Omnibus-on-AI-Enters-Into-Force-7-31-2026","\u002Fimages\u002Fblog\u002Feu-ai-act-gpai-high-risk-2026\u002Fcover.webp","\u002Fimages\u002Fblog\u002Feu-ai-act-gpai-high-risk-2026\u002Fog.jpg",[74,75,76],"EU AI Act jenseits von Artikel 50: GPAI, Hochrisiko-Fristen und To-dos","EU AI Act nach dem Digital Omnibus: GPAI-Pflichten, Hochrisiko-Fristen (2.12.2027 und 2.8.2028), Anbieter oder Betreiber bei OpenAI- und Anthropic-APIs.","EU AI Act (GPAI, Hochrisiko): Ein Roboter geht an einer Zeitleiste mit drei Anhängern über einem Warnschild entlang.",{"slug":524,"published":525,"minutes":82,"category":8,"tags":526,"tagPages":530,"keywords":531,"about":540,"sources":551,"cover":591,"og":592,"expertise":72,"locales":593,"lang":75,"title":594,"description":595,"coverAlt":596},"dpia-llm-feature-worked-example","2026-10-01",[527,365,10,528,529],"DPIA","Data protection","AI Act",[368,16],[532,533,534,535,536,537,538,539],"dsfa für llm-features","datenschutz-folgenabschätzung ki-assistent","dsgvo artikel 35 ki","dsfa-v österreich ki","llm kundensupport dsgvo","prompt injection datenabfluss dsgvo","ki-verordnung artikel 50 chatbot","dsfa vorlage llm",[541,543,546,549],{"name":380,"url":542},"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=CELEX:32016R0679",{"name":544,"url":545},"WP29 guidelines on data protection impact assessment (WP248 rev.01)","https:\u002F\u002Fec.europa.eu\u002Fnewsroom\u002Farticle29\u002Fitems\u002F611236\u002Fen",{"name":547,"url":548},"OWASP LLM01:2025 Prompt Injection","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm01-prompt-injection\u002F",{"name":550,"url":470},"Regulation (EU) 2024\u002F1689 (AI Act)",[552,553,555,558,561,564,567,570,573,576,578,580,583,586,589,590],{"title":403,"url":542},{"title":554,"url":545},"WP29 guidelines on DPIA, WP248 rev.01 (European Commission item page)",{"title":556,"url":557},"WP248 rev.01 PDF, adopted 4 April 2017 and revised 4 October 2017","https:\u002F\u002Fec.europa.eu\u002Fnewsroom\u002Fjust\u002Fdocument.cfm?doc_id=47711",{"title":559,"url":560},"EDPB Guidelines 07\u002F2020 on the concepts of controller and processor","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2023-10\u002Fedpb_guidelines_202007_controllerprocessor_final_en.pdf",{"title":562,"url":563},"EDPB Opinion 28\u002F2024 on AI models, adopted 17 December 2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2024-12\u002Fedpb_opinion_202428_ai-models_en.pdf",{"title":565,"url":566},"EDPB news release on Opinion 28\u002F2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fnews\u002Fedpb-opinion-on-ai-models-gdpr-principles-support-responsible-ai_en",{"title":568,"url":569},"EDPB, Report of the work undertaken by the ChatGPT Taskforce, 23 May 2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2024-05\u002Fedpb_20240523_report_chatgpt_taskforce_en.pdf",{"title":571,"url":572},"DSFA-V, BGBl. II Nr. 278\u002F2018 (RIS)","https:\u002F\u002Fwww.ris.bka.gv.at\u002Feli\u002Fbgbl\u002FII\u002F2018\u002F278",{"title":574,"url":575},"DSFA-AV, BGBl. II Nr. 108\u002F2018 (RIS)","https:\u002F\u002Fwww.ris.bka.gv.at\u002Feli\u002Fbgbl\u002FII\u002F2018\u002F108",{"title":577,"url":548},"OWASP Top 10 for LLM Applications 2025: LLM01 Prompt Injection",{"title":579,"url":347},"OWASP Top 10 for LLM Applications 2025: LLM02 Sensitive Information Disclosure",{"title":581,"url":582},"OpenAI, Data controls in the OpenAI platform","https:\u002F\u002Fdevelopers.openai.com\u002Fapi\u002Fdocs\u002Fguides\u002Fyour-data",{"title":584,"url":585},"Commission Implementing Decision (EU) 2023\u002F1795 on the EU–US Data Privacy Framework","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Fdec_impl\u002F2023\u002F1795\u002Foj\u002Feng",{"title":587,"url":588},"CJEU, Case C-184\u002F20, OT v Vyriausioji tarnybinės etikos komisija","https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=CELEX:62020CJ0184",{"title":408,"url":470},{"title":472,"url":411},"\u002Fimages\u002Fblog\u002Fdpia-llm-feature-worked-example\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fdpia-llm-feature-worked-example\u002Fog.jpg",[74,75,76],"DSFA für einen LLM-Support-Assistenten: ein Beispiel nach Art. 35 DSGVO","DSFA nach Art. 35 DSGVO für einen KI-Assistenten, der Kundenmails mit Bestelldaten beantwortet: wann sie nötig ist und wer die Risiken trägt.","DSFA für LLM-Assistenten: Ein Formular auf einem Klemmbrett neben einem Roboter mit Sprechblase, Lupe und Stempel.",{"slug":598,"published":599,"minutes":600,"category":8,"tags":601,"tagPages":604,"keywords":606,"about":614,"sources":624,"cover":652,"og":653,"expertise":72,"locales":654,"lang":75,"title":655,"description":656,"coverAlt":657},"guardrails-ai","2026-09-29",10,[11,14,602,603],"LLM reliability","Python",[17,605],"python",[607,608,609,610,611,612,613],"guardrails ai","guardrails ai validatoren","llm-ausgabe validieren python","guardrails vs nemo guardrails vergleich","guardrails on_fail aktionen","ki-guardrails framework","pii-validierung llm-ausgabe",[615,618,621],{"name":616,"url":617},"NVIDIA","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FNVIDIA",{"name":619,"url":620},"Apache License","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FApache_License",{"name":622,"url":623},"Large language model","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FLarge_language_model",[625,628,631,634,637,640,643,646,649],{"title":626,"url":627},"Guardrails AI on GitHub: README, news and FAQ","https:\u002F\u002Fgithub.com\u002Fguardrails-ai\u002Fguardrails",{"title":629,"url":630},"guardrails-ai 0.11.0 on PyPI","https:\u002F\u002Fpypi.org\u002Fproject\u002Fguardrails-ai\u002F",{"title":632,"url":633},"Guardrails Hub: 65 validators","https:\u002F\u002Fwww.guardrailsai.com\u002Fhub",{"title":635,"url":636},"Guardrails documentation: error remediation and on-fail actions","https:\u002F\u002Fwww.guardrailsai.com\u002Fdocs\u002Fconcepts\u002Ferror_remediation",{"title":638,"url":639},"Guardrails documentation: use on-fail actions","https:\u002F\u002Fwww.guardrailsai.com\u002Fguardrails\u002Fdocs\u002Fhow-to-guides\u002Fuse_on_fail_actions",{"title":641,"url":642},"Migration issue 1560: moving off hosted remote inferencing","https:\u002F\u002Fgithub.com\u002Fguardrails-ai\u002Fguardrails\u002Fissues\u002F1560",{"title":644,"url":645},"NVIDIA NeMo Guardrails on GitHub","https:\u002F\u002Fgithub.com\u002FNVIDIA-NeMo\u002FGuardrails",{"title":647,"url":648},"NVIDIA NeMo Guardrails documentation","https:\u002F\u002Fdocs.nvidia.com\u002Fnemo\u002Fguardrails\u002Flatest\u002Findex.html",{"title":650,"url":651},"OpenAI API pricing, including moderation","https:\u002F\u002Fdevelopers.openai.com\u002Fapi\u002Fdocs\u002Fpricing","\u002Fimages\u002Fblog\u002Fguardrails-ai\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fguardrails-ai\u002Fog.jpg",[74,75,76],"Guardrails AI: prüfen, was das Modell zurückgibt","Guardrails AI im Test: 65 Validatoren, acht On-Fail-Aktionen, das Ende der gehosteten Inferencing im August 2026 und wann NeMo Guardrails besser passt.","Guardrails AI: Ein kleines Auto fährt eine kurvige Bergstraße mit Leitplanke entlang.",{"slug":659,"published":660,"minutes":82,"category":8,"tags":661,"tagPages":667,"keywords":668,"about":678,"sources":685,"cover":700,"og":701,"expertise":72,"locales":702,"lang":75,"title":703,"description":704,"coverAlt":705},"eu-ai-act-article-50-developer-checklist","2026-09-22",[442,662,663,664,665,666],"Article 50","AI transparency","Digital Omnibus","AI literacy","Compliance",[],[669,670,671,672,673,674,675,676,454,677],"eu ai act artikel 50","ki-verordnung entwickler","artikel 50 ki-verordnung","ki-transparenzpflichten","ai act chatbot kennzeichnung","digital omnibus ki-verordnung","ai act artikel 50 absatz 2 kennzeichnung","ai act deepfake kennzeichnung","gilt der ai act für meine app",[679,680,682],{"name":460,"url":461},{"name":681,"url":411},"Regulation (EU) 2026\u002F1744",{"name":683,"url":684},"AI Act Explorer","https:\u002F\u002Fartificialintelligenceact.eu\u002Fai-act-explorer\u002F",[686,689,692,695,697],{"title":687,"url":688},"Article 50: Transparency Obligations for Providers and Deployers of Certain AI Systems","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F50\u002F",{"title":690,"url":691},"Regulation (EU) 2026\u002F1744 (Digital Omnibus on AI), Official Journal, 24 Jul 2026","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2026\u002F1744\u002Foj\u002Feng",{"title":693,"url":694},"Faegre Drinker: Commission confirms Transparency Code of Practice as adequate and publishes final Article 50 Guidelines (30 Jul 2026)","https:\u002F\u002Fwww.faegredrinker.com\u002Fen\u002Finsights\u002Fpublications\u002F2026\u002F7\u002Feu-ai-act-commission-confirms-transparency-code-of-practice-as-adequate-and-publishes-final-version-of-its-guidelines-on-transparency-obligations",{"title":696,"url":510},"Gibson Dunn: EU AI Act Omnibus Agreement, postponed high-risk deadlines and other key changes (27 May 2026)",{"title":698,"url":699},"RTR KI-Servicestelle: AI Act (Austria)","https:\u002F\u002Fwww.rtr.at\u002Frtr\u002Fservice\u002Fki-servicestelle\u002Fai-act\u002F","\u002Fimages\u002Fblog\u002Feu-ai-act-article-50-developer-checklist\u002Fcover.webp","\u002Fimages\u002Fblog\u002Feu-ai-act-article-50-developer-checklist\u002Fog.jpg",[74,75,76],"EU AI Act Article 50: was Entwickler seit 2. August 2026 tun müssen","EU AI Act Article 50 für Entwickler: Offenlegung von KI-Interaktion, maschinenlesbare Kennzeichnung, Deepfakes, Anbieter oder Betreiber, Checkliste.","EU AI Act, Artikel 50: Ein Roboter mit sichtbarem Namensschild neben einem Kalender mit markiertem Datum und Checkliste.",{"slug":707,"published":708,"minutes":709,"category":8,"tags":710,"tagPages":715,"keywords":716,"about":727,"sources":731,"cover":761,"og":762,"expertise":72,"locales":763,"lang":75,"title":764,"description":765,"coverAlt":766},"prompt-injection-lethal-trifecta-patterns","2026-09-01",9,[105,711,712,713,714],"AI agent security","Lethal trifecta","Design patterns","Red teaming",[],[717,718,719,720,721,722,723,724,725,726],"prompt injection abwehren","prompt injection schutz","lethal trifecta erklärt","ki-agenten sicherheit","indirekte prompt injection","dual llm muster","prompt injection designmuster","prompt injection bei ki-agenten verhindern","egress-allowlist prompt injection","owasp agentic top 10 goal-hijacking",[728,729,730],{"name":105,"url":106},{"name":622,"url":623},{"name":13,"url":38},[732,735,738,741,744,747,750,753,756,758],{"title":733,"url":734},"Simon Willison: The lethal trifecta for AI agents","https:\u002F\u002Fsimonwillison.net\u002F2025\u002FJun\u002F16\u002Fthe-lethal-trifecta\u002F",{"title":736,"url":737},"Design Patterns for Securing LLM Agents against Prompt Injections","https:\u002F\u002Farxiv.org\u002Fabs\u002F2506.08837",{"title":739,"url":740},"Simon Willison: Design patterns for securing LLM agents (summary)","https:\u002F\u002Fsimonwillison.net\u002F2025\u002FJun\u002F13\u002Fprompt-injection-design-patterns\u002F",{"title":742,"url":743},"Simon Willison: The Dual LLM pattern","https:\u002F\u002Fsimonwillison.net\u002F2023\u002FApr\u002F25\u002Fdual-llm-pattern\u002F",{"title":745,"url":746},"Defeating Prompt Injections by Design (CaMeL)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2503.18813",{"title":748,"url":749},"The Attacker Moves Second","https:\u002F\u002Farxiv.org\u002Fabs\u002F2510.09023",{"title":751,"url":752},"Meta: Agents Rule of Two","https:\u002F\u002Fai.meta.com\u002Fblog\u002Fpractical-ai-agent-security\u002F",{"title":754,"url":755},"Anthropic: How we contain Claude","https:\u002F\u002Fwww.anthropic.com\u002Fengineering\u002Fhow-we-contain-claude",{"title":757,"url":290},"Claude Code documentation: Sandboxing",{"title":759,"url":760},"promptfoo: OWASP Top 10 for Agentic Applications","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fowasp-agentic-ai\u002F","\u002Fimages\u002Fblog\u002Fprompt-injection-lethal-trifecta-patterns\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fprompt-injection-lethal-trifecta-patterns\u002Fog.jpg",[74,75,76],"Prompt Injection abwehren: lethal trifecta und sechs Designmuster","Warum sich Prompt Injection nicht filtern lässt: das lethal trifecta, sechs Designmuster, Egress-Regeln und eine Red-Team-Checkliste für KI-Agenten.","Prompt Injection abwehren: Eine Säge trennt ein Bein eines dreibeinigen Hockers mit Schlüssel, Umschlag und Tür ab.",{"slug":768,"published":769,"updated":770,"minutes":255,"category":8,"tags":771,"tagPages":777,"keywords":778,"about":791,"sources":799,"cover":815,"og":816,"expertise":72,"locales":817,"lang":75,"title":818,"description":819,"coverAlt":820},"gdpr-llm-api-eu-data-residency","2026-08-28","2026-09-02",[365,772,773,774,775,776],"Data residency","LLM API","Zero data retention","PII minimisation","EU hosting",[368],[779,780,781,782,783,784,785,786,787,788,789,790],"dsgvo-konforme llm api","llm datenresidenz cloud-anbieter","dsgvo llm","eu-datenresidenz ki","llm api dsgvo","claude eu-datenresidenz","openai eu-datenresidenz","zero retention llm","dsgvo pseudonymisierung","llm prompt personenbezogene daten","bedrock eu-region claude","self-hosted llm eu-compliance",[792,794,796],{"name":380,"url":793},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FGeneral_Data_Protection_Regulation",{"name":772,"url":795},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FData_residency",{"name":797,"url":798},"Pseudonymization","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPseudonymization",[800,803,806,809,812],{"title":801,"url":802},"Claude API docs: Data residency (inference_geo, workspace geo, pricing)","https:\u002F\u002Fplatform.claude.com\u002Fdocs\u002Fen\u002Fmanage-claude\u002Fdata-residency",{"title":804,"url":805},"Claude API docs: API and data retention (zero data retention scope and eligibility)","https:\u002F\u002Fplatform.claude.com\u002Fdocs\u002Fen\u002Fmanage-claude\u002Fapi-and-data-retention",{"title":807,"url":808},"Claude API docs: Models overview (platform model IDs, endpoint types)","https:\u002F\u002Fplatform.claude.com\u002Fdocs\u002Fen\u002Fabout-claude\u002Fmodels\u002Foverview",{"title":810,"url":811},"OpenAI: Introducing data residency in Europe","https:\u002F\u002Fopenai.com\u002Findex\u002Fintroducing-data-residency-in-europe\u002F",{"title":813,"url":814},"Regulation (EU) 2016\u002F679 (General Data Protection Regulation), EUR-Lex","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2016\u002F679\u002Foj","\u002Fimages\u002Fblog\u002Fgdpr-llm-api-eu-data-residency\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fgdpr-llm-api-eu-data-residency\u002Fog.jpg",[74,75,76],"DSGVO-LLM-Datenresidenz: Regionssteuerung, Zero Retention, EU-Optionen","Kann eine LLM-API DSGVO-konform sein? EU-Datenresidenz bei OpenAI, Claude über Bedrock und Google Cloud, Zero Data Retention und Self-Hosting.","DSGVO-LLM-Datenresidenz: Ordner bleiben in einem umzäunten Garten unter einem Sternenkreis, ein Roboter lehnt am Zaun.",{"slug":822,"published":823,"updated":525,"minutes":600,"category":8,"tags":824,"tagPages":829,"keywords":830,"about":837,"sources":844,"cover":869,"og":870,"expertise":72,"locales":871,"lang":75,"title":872,"description":873,"coverAlt":874},"semgrep","2026-08-14",[825,826,261,827,828],"SAST","Static analysis","Rule authoring","AppSec",[],[822,831,832,833,834,835,836],"semgrep vs codeql vergleich","semgrep regeln","semgrep preise","semgrep pro engine lizenz","kostenlose sast tools","semgrep github actions einrichten",[838,841],{"name":839,"url":840},"Semgrep","https:\u002F\u002Fsemgrep.dev",{"name":842,"url":843},"Static application security testing","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FStatic_application_security_testing",[845,848,851,854,857,860,863,866],{"title":846,"url":847},"Semgrep pricing: Free, Teams and Enterprise","https:\u002F\u002Fsemgrep.dev\u002Fpricing\u002F",{"title":849,"url":850},"Semgrep Community Edition","https:\u002F\u002Fsemgrep.dev\u002Fproducts\u002Fcommunity-edition",{"title":852,"url":853},"Semgrep documentation: cross-file analysis","https:\u002F\u002Fdocs.semgrep.dev\u002Fsemgrep-code\u002Fsemgrep-pro-engine-intro\u002F",{"title":855,"url":856},"Semgrep documentation: usage and billing","https:\u002F\u002Fdocs.semgrep.dev\u002Fusage-and-billing\u002Foverview\u002F",{"title":858,"url":859},"Semgrep releases: v1.179.0","https:\u002F\u002Fgithub.com\u002Fsemgrep\u002Fsemgrep\u002Freleases",{"title":861,"url":862},"Semgrep Rules License v1.0","https:\u002F\u002Fsemgrep.dev\u002Flegal\u002Frules-license\u002F",{"title":864,"url":865},"Important updates to Semgrep OSS, 13 December 2024","https:\u002F\u002Fsemgrep.dev\u002Fblog\u002F2024\u002Fimportant-updates-to-semgrep-oss\u002F",{"title":867,"url":868},"OpenGrep repository","https:\u002F\u002Fgithub.com\u002Fopengrep\u002Fopengrep","\u002Fimages\u002Fblog\u002Fsemgrep\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fsemgrep\u002Fog.jpg",[74,75,76],"Semgrep: statische Analyse, die in einen Pull Request passt","Semgrep im Test: über 30 Sprachen, YAML-Muster in Sekunden, Engine unter LGPL-2.1. Cross-File-Analyse, Regelsätze und KI-Triage nur in bezahlten Stufen.","Semgrep: Ein feiner Kamm fängt einen kleinen Käfer zwischen Papierstreifen.",{"slug":876,"published":877,"updated":708,"minutes":600,"category":8,"tags":878,"tagPages":884,"keywords":885,"about":896,"sources":906,"cover":927,"og":928,"expertise":72,"locales":929,"lang":75,"title":930,"description":931,"coverAlt":932},"mcp-server-security-checklist","2026-08-11",[879,880,881,882,883],"MCP security","Tool poisoning","MCP OAuth","Supply chain","Audit logs",[],[886,887,888,889,890,891,892,893,894,895],"mcp-sicherheit","mcp server sicherheit checkliste","mcp tool-poisoning erklärt","mcp rug pull angriff","mcp oauth einrichten","mcp schwachstellen","mcp server absichern","mcp autorisierung rfc 9207","nsa mcp leitfaden","mcp audit-logs",[897,898,901,904],{"name":279,"url":280},{"name":899,"url":900},"OAuth 2.0","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FOAuth",{"name":902,"url":903},"OpenTelemetry","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FOpenTelemetry",{"name":13,"url":905},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FOWASP",[907,910,913,916,919,922,925],{"title":908,"url":909},"Invariant Labs: MCP Security Notification – Tool Poisoning Attacks (1 April 2025)","https:\u002F\u002Finvariantlabs.ai\u002Fblog\u002Fmcp-security-notification-tool-poisoning-attacks",{"title":911,"url":912},"OWASP: Top 10 for Agentic Applications for 2026 (9 December 2025)","https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fowasp-top-10-for-agentic-applications-for-2026\u002F",{"title":914,"url":915},"MCP specification 2026-07-28: changelog (SEP-2468, SEP-2352, SEP-414)","https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fmodelcontextprotocol\u002Fblob\u002Fmain\u002Fdocs\u002Fspecification\u002F2026-07-28\u002Fchangelog.mdx",{"title":917,"url":918},"RFC 9207: OAuth 2.0 Authorization Server Issuer Identification","https:\u002F\u002Fwww.rfc-editor.org\u002Frfc\u002Frfc9207",{"title":920,"url":921},"NSA: Model Context Protocol (MCP) – Security Design Considerations for AI-Driven Automation (May 2026)","https:\u002F\u002Fmedia.defense.gov\u002F2026\u002FJun\u002F02\u002F2003943289\u002F-1\u002F-1\u002F0\u002FCSI_MCP_SECURITY.PDF",{"title":923,"url":924},"Reed Smith: NSA publishes security guidance on designing AI systems with MCP (4 June 2026)","https:\u002F\u002Fwww.reedsmith.com\u002Four-insights\u002Fblogs\u002Fviewpoints\u002F102mvg9\u002Fnsa-publishes-security-guidance-on-designing-ai-systems-with-model-context-protoc\u002F",{"title":926,"url":755},"Anthropic: How we contain Claude across products (25 May 2026)","\u002Fimages\u002Fblog\u002Fmcp-server-security-checklist\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fmcp-server-security-checklist\u002Fog.jpg",[74,75,76],"MCP-Sicherheits-Checkliste: Tool-Poisoning, Rug Pulls und OAuth","MCP-Sicherheits-Checkliste: Bedrohungsmodell, Tool-Poisoning, Rug Pulls, RFC-9207-Issuer-Prüfung, Credentials pro Issuer, enge Tokens und Audit-Logs.","MCP-Sicherheits-Checkliste: Stecker und Buchse mit Vorhängeschloss gesichert, ein Wurm kriecht zum Kabel.",{"slug":934,"published":935,"updated":708,"minutes":255,"category":8,"tags":936,"tagPages":941,"keywords":942,"about":953,"sources":966,"cover":976,"og":977,"expertise":72,"locales":978,"lang":75,"title":979,"description":980,"coverAlt":981},"sandboxing-coding-agents-ci-checklist","2026-08-05",[937,261,938,939,940],"AI agent sandbox","Egress control","Credentials","Container isolation",[],[943,944,945,946,947,948,949,950,951,952],"ki-agent sandbox","coding-agent sicherheit","agenten-isolation","ci-sicherheit checkliste","egress-allowlist","coding-agent sandbox einrichten","cloud metadata endpoint blockieren","gvisor sandbox","seatbelt bubblewrap sandbox vergleich","kurzlebige agent-zugangsdaten",[954,957,960,963],{"name":955,"url":956},"Sandbox (software development)","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSandbox_(software_development)",{"name":958,"url":959},"gVisor","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FgVisor",{"name":961,"url":962},"Hugging Face","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FHugging_Face",{"name":964,"url":965},"Virtual machine","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FVirtual_machine",[967,970,973,974],{"title":968,"url":969},"Hugging Face: technical timeline of the July 2026 intrusion","https:\u002F\u002Fhuggingface.co\u002Fblog\u002Fagent-intrusion-technical-timeline",{"title":971,"url":972},"METR and Redwood Research: independent investigation (26 August 2026)","https:\u002F\u002Fmetr.org\u002Fblog\u002F2026-08-26-openai-hugging-face-incident-investigation\u002F",{"title":926,"url":755},{"title":975,"url":290},"Claude Code documentation: the sandboxed Bash tool","\u002Fimages\u002Fblog\u002Fsandboxing-coding-agents-ci-checklist\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fsandboxing-coding-agents-ci-checklist\u002Fog.jpg",[74,75,76],"KI-Agent-Sandbox-Checkliste: Lehren aus einem CI-Einbruch","Sandbox-Checkliste für Agenten in der CI: Isolationsstufen, Egress-Allowlist, kurzlebige Credentials, Metadata-Endpunkte, nicht vertrauenswürdige Config.","KI-Agent-Sandbox-Checkliste: Ein Roboter spielt im Sandkasten, draußen ein aufgebrochenes Schloss und eine Checkliste.",{"slug":983,"published":984,"minutes":709,"category":8,"tags":985,"tagPages":986,"keywords":987,"about":996,"sources":1001,"cover":1026,"og":1027,"expertise":72,"locales":1028,"lang":75,"title":1029,"description":1030,"coverAlt":1031},"lakera-guard","2026-08-04",[105,11,10,12],[17,16],[988,989,990,991,992,993,994,995],"lakera guard","lakera guard test","prompt-injection-filter","prompt injection erkennen","llm guardrails vergleich","pint benchmark ergebnisse","check point ki-guardrails","lakera preise",[997,998],{"name":105,"url":106},{"name":999,"url":1000},"Check Point","https:\u002F\u002Fwww.checkpoint.com\u002F",[1002,1005,1008,1011,1014,1017,1020,1023],{"title":1003,"url":1004},"Lakera documentation: Guard API","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fapi\u002Fguard",{"title":1006,"url":1007},"Guard API endpoint reference","https:\u002F\u002Fdocs.lakera.ai\u002Fapi-reference\u002Flakera-api\u002Fguard\u002Fscreen-content",{"title":1009,"url":1010},"Lakera documentation: projects","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fprojects",{"title":1012,"url":1013},"Lakera documentation: self-hosting","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fselfhosting",{"title":1015,"url":1016},"Lakera platform pricing","https:\u002F\u002Fplatform.lakera.ai\u002Fpricing",{"title":1018,"url":1019},"PINT benchmark on GitHub","https:\u002F\u002Fgithub.com\u002Flakeraai\u002Fpint-benchmark",{"title":1021,"url":1022},"Lakera homepage","https:\u002F\u002Fwww.lakera.ai\u002F",{"title":1024,"url":1025},"Check Point press release on the Lakera acquisition","https:\u002F\u002Fwww.checkpoint.com\u002Fpress-releases\u002Fcheck-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises\u002F","\u002Fimages\u002Fblog\u002Flakera-guard\u002Fcover.webp","\u002Fimages\u002Fblog\u002Flakera-guard\u002Fog.jpg",[74,75,76],"Lakera Guard: Prompt-Injection-Filter an der Request-Grenze","Lakera Guard im Test: ein Endpunkt vor dem Modell, PINT-Benchmark-Ergebnisse und warum die Gratis-Stufe schon bei 10.000 Anfragen im Monat endet.","Lakera Guard: Ein Wächter an der Tür hält ein Sieb, das einen Umschlag mit Haken auffängt.",{"slug":1033,"published":1034,"updated":935,"minutes":600,"category":8,"tags":1035,"tagPages":1039,"keywords":1040,"about":1047,"sources":1053,"cover":1078,"og":1079,"expertise":72,"locales":1080,"lang":75,"title":1081,"description":1082,"coverAlt":1083},"detect-secrets","2026-08-03",[1036,1037,282,1038],"Secret scanning","Pre-commit","DevSecOps",[],[1033,1041,1042,1043,1044,1045,1046],"detect-secrets vs gitleaks vergleich","detect-secrets baseline datei","secret-scanner vergleich","gitleaks vs trufflehog vergleich","geleakte api-keys rotieren","pre-commit secret-hook einrichten",[1048,1051,1052],{"name":1049,"url":1050},"Yelp","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FYelp",{"name":282,"url":283},{"name":619,"url":620},[1054,1056,1059,1062,1065,1068,1070,1072,1075],{"title":1055,"url":338},"Yelp\u002Fdetect-secrets: README and usage",{"title":1057,"url":1058},"Yelp\u002Fdetect-secrets: CHANGELOG (v1.5.0, 6 May 2024)","https:\u002F\u002Fgithub.com\u002FYelp\u002Fdetect-secrets\u002Fblob\u002Fmaster\u002FCHANGELOG.md",{"title":1060,"url":1061},"Yelp\u002Fdetect-secrets: plugin and verification documentation","https:\u002F\u002Fgithub.com\u002FYelp\u002Fdetect-secrets\u002Fblob\u002Fmaster\u002Fdocs\u002Fplugins.md",{"title":1063,"url":1064},"detect-secrets 1.5.0 on PyPI","https:\u002F\u002Fpypi.org\u002Fproject\u002Fdetect-secrets\u002F",{"title":1066,"url":1067},"Yelp\u002Fdetect-secrets: releases","https:\u002F\u002Fgithub.com\u002FYelp\u002Fdetect-secrets\u002Freleases",{"title":1069,"url":332},"Gitleaks README (MIT, Go)",{"title":1071,"url":335},"TruffleHog README (AGPL-3.0, credential verification)",{"title":1073,"url":1074},"GitHub Docs: About secret scanning","https:\u002F\u002Fdocs.github.com\u002Fen\u002Fcode-security\u002Fsecret-scanning\u002Fintroduction\u002Fabout-secret-scanning",{"title":1076,"url":1077},"betterleaks\u002Fbetterleaks","https:\u002F\u002Fgithub.com\u002Fbetterleaks\u002Fbetterleaks","\u002Fimages\u002Fblog\u002Fdetect-secrets\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fdetect-secrets\u002Fog.jpg",[74,75,76],"detect-secrets: Secret Scanning mit eingecheckter Baseline","detect-secrets im Test: eingecheckte Baseline im Vergleich zu gitleaks und TruffleHog, Verifikationsaufrufe in der CI und wo das Tool aufhört.","detect-secrets: Ein Spürhund prüft Koffer auf einem Band, aus einem ragt ein Schlüssel.",{"slug":1085,"published":1086,"updated":708,"minutes":82,"category":8,"tags":1087,"tagPages":1091,"keywords":1092,"about":1103,"sources":1111,"cover":1172,"og":1173,"expertise":72,"locales":1174,"lang":75,"title":1175,"description":1176,"coverAlt":1177},"pii-redaction-llm-pipelines","2026-06-26",[1088,365,1089,10,1090],"PII redaction","Microsoft Presidio","Pseudonymisation",[368,16],[1093,1094,1095,1096,1097,1098,1099,1100,1101,1102],"pii-schwärzung llm","pii vor llm-anfrage entfernen","microsoft presidio anleitung","pii-erkennung deutsch ungarisch","pseudonymisierung vs anonymisierung dsgvo","reversible tokenisierung llm-prompts","pii in logs und traces schwärzen","llm datenmaskierung","pii-guardrail litellm einrichten","pii-erkennung recall testen",[1104,1107,1108],{"name":1105,"url":1106},"Personal data","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPersonal_data",{"name":380,"url":793},{"name":1109,"url":1110},"Data anonymization","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FData_anonymization",[1112,1115,1118,1121,1124,1127,1130,1133,1136,1139,1142,1145,1148,1151,1154,1157,1160,1163,1166,1169],{"title":1113,"url":1114},"Microsoft Presidio: documentation (limitations, methods)","https:\u002F\u002Fpresidio.dataprivacystack.org\u002F",{"title":1116,"url":1117},"Presidio: supported entities and country-specific recognizers","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fsupported_entities\u002F",{"title":1119,"url":1120},"Presidio: supporting additional languages","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fanalyzer\u002Flanguages\u002F",{"title":1122,"url":1123},"Presidio: anonymizer operators","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fanonymizer\u002F",{"title":1125,"url":1126},"Google Cloud: infoTypes reference","https:\u002F\u002Fdocs.cloud.google.com\u002Fsensitive-data-protection\u002Fdocs\u002Finfotypes-reference",{"title":1128,"url":1129},"Google Cloud: pseudonymization in Sensitive Data Protection","https:\u002F\u002Fdocs.cloud.google.com\u002Fsensitive-data-protection\u002Fdocs\u002Fpseudonymization",{"title":1131,"url":1132},"Microsoft Learn: Azure Language PII detection language support","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Flanguage-service\u002Fpersonally-identifiable-information\u002Flanguage-support",{"title":1134,"url":1135},"AWS: Detecting PII entities with Amazon Comprehend","https:\u002F\u002Fdocs.aws.amazon.com\u002Fcomprehend\u002Flatest\u002Fdg\u002Fhow-pii.html",{"title":1137,"url":1138},"spaCy: models and languages","https:\u002F\u002Fspacy.io\u002Fusage\u002Fmodels",{"title":1140,"url":1141},"Hugging Face: novakat\u002Fnerkor-hubert (Hungarian NER)","https:\u002F\u002Fhuggingface.co\u002Fnovakat\u002Fnerkor-hubert",{"title":1143,"url":1144},"arXiv: An Evaluation Study of Hybrid Methods for Multilingual PII Detection","https:\u002F\u002Farxiv.org\u002Fabs\u002F2510.07551",{"title":1146,"url":1147},"LiteLLM: Presidio PII masking guardrail","https:\u002F\u002Fdocs.litellm.ai\u002Fdocs\u002Fproxy\u002Fguardrails\u002Fpii_masking_v2",{"title":1149,"url":1150},"Langfuse: masking","https:\u002F\u002Flangfuse.com\u002Fdocs\u002Fobservability\u002Ffeatures\u002Fmasking",{"title":1152,"url":1153},"GDPR Article 4: definitions (pseudonymisation, 4(5))","https:\u002F\u002Fgdpr-info.eu\u002Fart-4-gdpr\u002F",{"title":1155,"url":1156},"EDPB: Guidelines 01\u002F2025 on Pseudonymisation","https:\u002F\u002Fwww.edpb.europa.eu\u002Four-work-tools\u002Fdocuments\u002Fpublic-consultations\u002F2025\u002Fguidelines-012025-pseudonymisation_en",{"title":1158,"url":1159},"IAPP: EDPB publishes draft guidelines on pseudonymization","https:\u002F\u002Fiapp.org\u002Fnews\u002Fa\u002F-what-s-in-a-name-edpb-publishes-draft-guidelines-on-pseudonymization",{"title":1161,"url":1162},"Taylor Wessing: Analysis of the CJEU judgment in C-413\u002F23 P (EDPS v SRB)","https:\u002F\u002Fwww.taylorwessing.com\u002Fen\u002Finsights-and-events\u002Finsights\u002F2025\u002F09\u002Fanalysis-of-the-cjeu-judgment",{"title":1164,"url":1165},"Jones Day: CJEU clarifies scope of personal data in EDPS v SRB","https:\u002F\u002Fwww.jonesday.com\u002Fen\u002Finsights\u002F2025\u002F09\u002Fcjeu-clarifies-scope-of-personal-data-in-edps-v-srb-decision",{"title":1167,"url":1168},"IAPP: leaked Council Digital Omnibus compromise drops the revised personal data definition","https:\u002F\u002Fiapp.org\u002Fnews\u002Fa\u002Feu-member-states-leaked-digital-omnibus-compromise-proposal-eliminates-revised-gdpr-definition-of-personal-data",{"title":1170,"url":1171},"Law Health Tech: Pseudonymisation under the GDPR and the Digital Omnibus (May 2026)","https:\u002F\u002Flawhealthtech.com\u002F2026\u002F05\u002F04\u002Fpseudonymisation-under-the-gdpr-where-we-are-what-may-change-under-the-digital-omnibus-and-what-regulators-think\u002F","\u002Fimages\u002Fblog\u002Fpii-redaction-llm-pipelines\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fpii-redaction-llm-pipelines\u002Fog.jpg",[74,75,76],"PII-Schwärzung in LLM-Pipelines: wo, wie und was die DSGVO dazu sagt","PII in LLM-Pipelines schwärzen: Tokens oder Maskierung, Presidio, Cloud-DLP, Lücken bei Deutsch und Ungarisch und was die DSGVO dazu sagt.","PII-Schwärzung: Eine Hand schwärzt Zeilen auf einem Blatt, ein Roboter wartet darauf.",{"slug":1179,"published":1180,"updated":1181,"minutes":709,"category":8,"tags":1182,"tagPages":1184,"keywords":1185,"about":1191,"sources":1196,"cover":1208,"og":1209,"expertise":72,"locales":1210,"lang":75,"title":1211,"description":1212,"coverAlt":1213},"rebuff","2026-06-22","2026-07-09",[105,10,11,1183],"Canary tokens",[16,17],[1179,1186,1187,1188,1189,1190],"prompt-injection-erkennung","rebuff python-sdk","llm-guardrail gegen prompt injection","canary token datenabfluss erkennen","rebuff alternativen",[1192,1195],{"name":1193,"url":1194},"Rebuff","https:\u002F\u002Fgithub.com\u002Fprotectai\u002Frebuff",{"name":622,"url":623},[1197,1199,1202,1205],{"title":1198,"url":1194},"Rebuff repository, archived 16 May 2025",{"title":1200,"url":1201},"Rebuff 0.1.1 on PyPI, released 20 January 2024","https:\u002F\u002Fpypi.org\u002Fproject\u002Frebuff\u002F",{"title":1203,"url":1204},"LangChain: Rebuff, detecting prompt injection attacks","https:\u002F\u002Fwww.langchain.com\u002Fblog\u002Frebuff",{"title":1206,"url":1207},"LLM Guard repository, archived 9 July 2026","https:\u002F\u002Fgithub.com\u002Fprotectai\u002Fllm-guard","\u002Fimages\u002Fblog\u002Frebuff\u002Fcover.webp","\u002Fimages\u002Fblog\u002Frebuff\u002Fog.jpg",[74,75,76],"Rebuff: vier Schichten Prompt-Injection-Erkennung, inzwischen archiviert","Rebuff: Prompts prüfen mit Heuristiken, einem LLM, Vektorstore früherer Angriffe und Canary-Tokens. Das Repo ist seit Mai 2025 archiviert.","Rebuff: Eine geschlossene Archivkiste vor vier Verteidigungsringen: Graben, Zaun, Mauer und Tor.",{"slug":1215,"published":1180,"updated":877,"minutes":600,"category":8,"tags":1216,"tagPages":1219,"keywords":1220,"about":1229,"sources":1239,"cover":1272,"og":1273,"expertise":72,"locales":1274,"lang":75,"title":1275,"description":1276,"coverAlt":1277},"protect-ai",[1217,882,1218,261],"Model scanning","Pickle",[],[1221,1222,1223,1224,1225,1226,1227,1228],"protect ai guardian eingestellt","modelscan","ki-modell-scanning","prisma airs ki-modellsicherheit","pickle-malware scanner","modell-serialisierung angriff","modelscan vs modelaudit vergleich","hugging face modell auf malware prüfen",[1230,1233,1236],{"name":1231,"url":1232},"Protect AI","https:\u002F\u002Fprotectai.com",{"name":1234,"url":1235},"Palo Alto Networks","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPalo_Alto_Networks",{"name":1237,"url":1238},"ModelScan","https:\u002F\u002Fgithub.com\u002Fprotectai\u002Fmodelscan",[1240,1243,1246,1249,1251,1254,1257,1260,1263,1266,1269],{"title":1241,"url":1242},"Palo Alto Networks: completes acquisition of Protect AI","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcompany\u002Fpress\u002F2025\u002Fpalo-alto-networks-completes-acquisition-of-protect-ai",{"title":1244,"url":1245},"Prisma AIRS AI Model Security product page","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fai-model-security",{"title":1247,"url":1248},"Prisma AIRS platform page served at protectai.com","https:\u002F\u002Fprotectai.com\u002F",{"title":1250,"url":1238},"ModelScan repository and README",{"title":1252,"url":1253},"ModelScan on PyPI","https:\u002F\u002Fpypi.org\u002Fproject\u002Fmodelscan\u002F",{"title":1255,"url":1256},"ModelAudit repository and README","https:\u002F\u002Fgithub.com\u002Fpromptfoo\u002Fmodelaudit",{"title":1258,"url":1259},"promptfoo documentation: model scanning","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fmodel-audit\u002F",{"title":1261,"url":1262},"Beyond F1: Evaluating Coverage and Failure Recovery in AI Model Security Scanners","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.27424",{"title":1264,"url":1265},"JFrog: three zero-day PickleScan vulnerabilities","https:\u002F\u002Fjfrog.com\u002Fblog\u002Funveiling-3-zero-day-vulnerabilities-in-picklescan\u002F",{"title":1267,"url":1268},"PickleScan repository and README","https:\u002F\u002Fgithub.com\u002Fmmaitre314\u002Fpicklescan",{"title":1270,"url":1271},"Hugging Face Hub docs: third-party scanner Protect AI","https:\u002F\u002Fhuggingface.co\u002Fdocs\u002Fhub\u002Fen\u002Fsecurity-protectai","\u002Fimages\u002Fblog\u002Fprotect-ai\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fprotect-ai\u002Fog.jpg",[74,75,76],"Protect AI Modell-Scanning: Guardian gibt es nicht mehr, ModelScan schon","Protect-AI-Modell-Scanning nach der Übernahme durch Palo Alto Networks: was aus Guardian wurde, was ModelScan kann und wie sich freie Scanner schlagen.","Protect AI Modell-Scanning: Ein Scannerbogen durchleuchtet eine Geschenkbox, daneben ein leerer Wachposten.",{"slug":1279,"published":1280,"updated":525,"minutes":82,"category":8,"tags":1281,"tagPages":1286,"keywords":1287,"about":1298,"sources":1305,"cover":1348,"og":1349,"expertise":72,"locales":1350,"lang":75,"title":1351,"description":1352,"coverAlt":1353},"ai-agent-identity-least-privilege","2026-05-18",[1282,1283,1284,1285],"AI agent identity","Least privilege","OAuth token exchange","Non-human identity",[],[1288,1289,1290,1291,1292,1293,1294,1295,1296,1297],"identitätsmanagement ki-agenten","non-human identity ki-agenten","least privilege ki-agenten","oauth token exchange ki-agenten","on-behalf-of flow ki-agent","microsoft entra agent id","okta agent sso cross app access","ki-agenten zugangsdaten und secrets","ki-agenten offboarding","delegierter vs autonomer agentenzugriff",[1299,1302,1303],{"name":1300,"url":1301},"Identity management","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FIdentity_management",{"name":276,"url":277},{"name":1304,"url":900},"OAuth",[1306,1309,1312,1315,1318,1321,1324,1327,1330,1333,1336,1339,1342,1345],{"title":1307,"url":1308},"Microsoft Learn: What is Microsoft Entra Agent ID?","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fwhat-is-microsoft-entra-agent-id",{"title":1310,"url":1311},"Microsoft Learn: What are agent identities?","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fwhat-are-agent-identities",{"title":1313,"url":1314},"Microsoft Learn: Best practices for Microsoft Entra Agent ID","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fbest-practices-agent-id",{"title":1316,"url":1317},"Microsoft Learn: Microsoft Entra Agent ID logs","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fsign-in-audit-logs-agents",{"title":1319,"url":1320},"Microsoft Learn: How agent identity deletion works","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fconcept-agent-identity-deletion",{"title":1322,"url":1323},"Microsoft Learn: What's new in Microsoft Entra Agent ID","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fentra\u002Fagent-id\u002Fwhats-new-agent-id",{"title":1325,"url":1326},"Microsoft Learn: Microsoft Agent 365 overview","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-agent-365\u002Foverview",{"title":1328,"url":1329},"Okta: Okta brings first-class identity to AI agents with Agent SSO (24 August 2026)","https:\u002F\u002Fwww.okta.com\u002Fnewsroom\u002Fpress-releases\u002Fokta-brings-first-class-identity-to-ai-agents-with-agent-sso\u002F",{"title":1331,"url":1332},"Okta: Auth0 gives developers the identity layer to securely ship agentic apps (May 2026)","https:\u002F\u002Fwww.okta.com\u002Fnewsroom\u002Farticles\u002Fauth0-may-2026-product-innovations\u002F",{"title":1334,"url":1335},"IETF: RFC 8693, OAuth 2.0 Token Exchange","https:\u002F\u002Fwww.rfc-editor.org\u002Frfc\u002Frfc8693",{"title":1337,"url":1338},"Model Context Protocol blog: Enterprise-Managed Authorization, zero-touch OAuth for MCP (18 June 2026)","https:\u002F\u002Fblog.modelcontextprotocol.io\u002Fposts\u002Fenterprise-managed-auth\u002F",{"title":1340,"url":1341},"Model Context Protocol: Security best practices","https:\u002F\u002Fmodelcontextprotocol.io\u002Fspecification\u002Fdraft\u002Fbasic\u002Fsecurity_best_practices",{"title":1343,"url":1344},"WorkOS: AI agents and the multi-hop delegation problem","https:\u002F\u002Fworkos.com\u002Fblog\u002Foauth-multi-hop-delegation-ai-agents",{"title":1346,"url":1347},"TechCrunch: OpenAI launches Dots, its bubbly agentic avatar","https:\u002F\u002Ftechcrunch.com\u002F2026\u002F09\u002F29\u002Fopenai-launches-dots-its-bubbly-agentic-avatar\u002F","\u002Fimages\u002Fblog\u002Fai-agent-identity-least-privilege\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fai-agent-identity-least-privilege\u002Fog.jpg",[74,75,76],"KI-Agenten sind Identitäten: Least Privilege für Nicht-Menschen","KI-Agenten als eigene Identitäten: delegierte Tokens, Secrets, Audit, Offboarding und ein Aus-Schalter. Was Entra, Okta und Auth0 dafür liefern.","Least Privilege für Agenten: Ein Roboter mit Ausweis hält einen einzigen kleinen Schlüssel vor drei Türen.",1793451238963]