AI Archives - Krishna Gupta

Agentic AI Systems: The Rise of Over-Autonomous Security Risks

1 July 2025 by Krishna

Artificial Intelligence (AI) is no longer just a tool—it’s becoming a decision-maker. With the emergence of Agentic AI Systems—AI with the ability to independently plan, act, and adapt across complex tasks—organisations are entering uncharted territory. While this autonomy promises operational efficiency, it also introduces over-autonomous risks that challenge traditional cybersecurity protocols.
For C-Suite executives and penetration testers alike, understanding the evolution of AI from a predictive model to a proactive actor is no longer optional—it’s imperative. The very qualities that make agentic systems powerful—initiative, goal-seeking behaviour, and environmental awareness—also make them vulnerable to sophisticated threats and capable of causing unintentional damage.

Information Security in the AI Era: Evolve Faster Than the Threats or Stay Behind

29 June 2025 by Krishna

In the corporate boardrooms and security operation centres of the 2020s, a new battlefront has emerged—cybersecurity in the AI era. The transformation is not subtle. Artificial Intelligence (AI) is no longer ahead of its time aspiration but a present-day force—amplifying threats and simultaneously offering powerful countermeasures. The question for today’s leadership isn’t whether AI will affect cybersecurity—it already has. The pressing challenge is: how quickly can your organisation evolve to match or outpace AI-enhanced adversaries?

LLM Models on Device: Unpacking Supply-Chain Vulnerabilities for Prompt Engineers and the C-Suite

15 June 2025 by Krishna

Supply-chain threats no longer pertain solely to enterprise software. In the world of on-device LLMs, hardware, firmware, model packaging, and even manufacturing processes are all potential vectors for compromise.

OWASP Top 10 for LLM – LLM01:2025 Prompt Injection

4 June 2025 by Krishna

The rapid adoption of Large Language Models (LLMs) such as ChatGPT, Claude, and Gemini has revolutionised enterprise operations across industries—from customer support and legal drafting to cybersecurity automation and product innovation. However, this surge in usage has opened new frontiers for cyber threats. Among the most pressing is LLM01:2025 Prompt Injection, the first and arguably the most dangerous vulnerability in OWASP’s Top 10 for LLMs.
Prompt injection attacks manipulate LLMs into executing unintended behaviours, bypassing safety protocols, generating harmful content, or leaking sensitive data—all of which hold serious business, regulatory, and reputational implications.