Blog

Analysis on enterprise AI governance, inline policy enforcement, agentic AI security, and regulatory compliance.

CVE-2026-48710 "BadHost": The Starlette Host Header Bug Sitting Under Most AI Gateways

CVE-2026-48710, disclosed by X41 D-Sec during an OSTIF-sponsored audit and nicknamed BadHost, lets a single malformed character in an HTTP Host header bypass path-based authentication middleware in Starlette, the ASGI framework underneath FastAPI, vLLM, LiteLLM, and most MCP servers. CISA added it to the KEV catalog on September 2, 2026. The bug sits a layer below the AI gateway a team actually chose, which is the argument for enforcing authorization at the request boundary instead of trusting framework middleware.

Platform & Architecturellm-securityai-securityzero-trustarchitectureinline-enforcement
Read post →

CVE-2026-59822: What an MCP Authentication Bypass in LiteLLM Teaches About Session-Level Authorization

CVE-2026-59822 lets an attacker reach LiteLLM MCP tooling with a fabricated Authorization header, because a failed key check fell back to an empty UserAPIKeyAuth object instead of rejecting the request. CISA added it to the Known Exploited Vulnerabilities catalog on September 2, 2026, alongside six other flaws. The bug sits in the MCP session boundary, not the general proxy API, which is a different failure mode than LiteLLM'"'"'s earlier CVE-2026-12773.

Platform & Architecturellm-securityai-securityzero-trustinline-enforcementpolicy-enforcement
Read post →

UK ICO AI Compliance Checklist: 11 Tests

This UK ICO AI guidance compliance checklist converts the regulator's current AI chapters into eleven gradable tests for governance, transparency, lawfulness, fairness, accuracy, minimisation, security and rights. It records the guidance review warning and verifies operative duties against current UK data protection legislation.

Compliance & Regulationcomplianceregulationai-complianceai-governanceauditpolicy-enforcement
Read post →

AI Agent Identity Tools: A 2026 Buyer Guide

AI agent identity has blurred into one marketing message, but the tools underneath do distinct jobs. This buyer guide sorts the field by function: non-human identity security platforms (Astrix, Oasis, Token Security), workload identity brokers and cloud-native IAM (Aembit and the cloud providers), and runtime enforcement plus per-decision audit on the live AI call. Each entry is honest about what it secures and where its boundary sits.

Comparisons & Alternativesai-securityidentity-and-authorizationagentic-aizero-trustpolicy-enforcementaudit
Read post →

EU AI Act Article 99: Fines and Penalty Tiers

Article 99 of the EU AI Act sets three penalty tiers reaching 35M EUR or 7% of global turnover for prohibited practices, 15M EUR or 3% for high-risk non-compliance, and 7.5M EUR or 1% for supplying misleading information. Article 99 has applied since August 2, 2025; the Digital Omnibus deferred most of the Tier 2 obligations it backs to December 2027 and August 2028.

Compliance & Regulationeu-ai-actai-governancecompliancepenaltiesenforcementregulation
Read post →

Hugging Face Security: What Access Tokens and Endpoint Isolation Cover

Hugging Face secures the Hub and Inference API through three separate mechanisms: fine-grained access tokens with org-level roles, private or gated repositories, and network isolation options on Inference Endpoints. Each answers a different question about who can reach a model. None of the three evaluates the specific prompt a specific authenticated caller sends on a given request. This piece maps where each control ends.

Platform & Architectureai-securityllm-securityidentity-and-authorizationarchitecturezero-trust
Read post →

Hugging Face Audit Logs at the AI Request Boundary

Hugging Face logs Inference API and Inference Endpoints traffic against an API token and an organization account. That record supports billing and rate-limit troubleshooting. A security review needs a different record, one that ties a specific hosted-model request to the actor who sent it. This article separates the two and lists what a review should retrieve.

Platform & Architectureai-securityllm-securityauditinline-enforcementpolicy-enforcement
Read post →

HubSpot Breeze Security: What Role-Based Permissions Miss

HubSpot scopes CRM permissions to what a user can open in the UI, one record at a time. Breeze agents assemble content from many records into a single prompt before that prompt reaches the underlying model, a step the permission model was never built to re-evaluate. This piece maps where the UI control stops and where request-level policy needs to pick up.

Platform & Architectureai-securityllm-securityidentity-and-authorizationarchitecturezero-trust
Read post →

HubSpot Breeze Audit Logs Need a Request-Level Record

HubSpot logs record CRM activity such as field edits, logins, and permission changes inside the admin console. That evidence answers a different question than what a Breeze agent actually sent to a model. This article separates the two records and maps what a request-level audit trail needs.

Platform & Architectureai-securityllm-securityauditinline-enforcementpolicy-enforcement
Read post →

Grok Enterprise Security: What API Credentials Do Not Authorize

An enterprise call to the Grok API authenticates with a single API credential shared across an application or team. xAI documents credential management and enterprise data-handling terms, but neither answers which employee or agent originated a given request. This piece maps that request-level gap and what closes it.

Platform & Architectureai-securityllm-securityidentity-and-authorizationarchitecturezero-trust
Read post →

Grok Enterprise Audit Logs: What the xAI API Console Shows

Grok reaches most enterprise deployments through xAI developer API, where a single API credential authenticates the calling application rather than the person using it. This article walks through what xAI usage console records at that request boundary, what it cannot show a security reviewer, and what independent evidence a compliance review actually needs.

Platform & Architectureai-securityllm-securityauditinline-enforcementpolicy-enforcement
Read post →

Grammarly Enterprise AI Security: What the API Call Actually Exposes

Grammarly Business runs as a browser extension, desktop app, or Office add-in, but every AI suggestion it generates depends on an HTTP call to Grammarly''s cloud API carrying the surrounding text. This piece separates that outbound request, and the admin controls Grammarly Business offers over it, from the local-integration questions that belong to endpoint and DLP tooling.

Platform & Architectureai-securityllm-securityidentity-and-authorizationarchitecturezero-trust
Read post →