Security-Architecture on CuraSechttps://curasec.metacog.co.kr/tags/security-architecture/Recent content in Security-Architecture on CuraSecHugoen-usFri, 16 Oct 2026 15:21:49 +0000SANS ISC: Limit AI Agent Permissions to Shrink Blast Radiushttps://curasec.metacog.co.kr/insights/2026-10-16-small-agents-smaller-blast-radius-controlling-what-ai-can-do/Fri, 16 Oct 2026 15:21:49 +0000https://curasec.metacog.co.kr/insights/2026-10-16-small-agents-smaller-blast-radius-controlling-what-ai-can-do/<ul> <li><strong>Engineer — Learn:</strong> Opinion piece arguing for minimal-permission AI agent design; useful mental model for engineers scoping tool access in agentic pipelines, but no immediate patch or config change required.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Learn:</strong> Conceptual framing for AI agent risk governance — relevant background reading when developing an AI use policy, but no near-term decision is required.</li> </ul>