AI Agent Permissions
AI agent permissions are the actions and data access granted to an AI driven workflow through its accounts, tools, and connected services.

The CyberGuard field guide / Topics
Understand the risks around AI models, prompts, agents, data, and the tools connected to them.

THE DEFINITIONS
Open a term for a plain-language explanation, a technical explanation, and a practical example.
AI agent permissions are the actions and data access granted to an AI driven workflow through its accounts, tools, and connected services.
AI assisted phishing uses generative tools to draft, personalize, translate, or scale deceptive messages intended to steal information or prompt harmful action.
AI red teaming is an authorized, structured effort to find harmful or unsafe behavior in an AI system before or during deployment.
Adversarial machine learning studies attacks that manipulate an AI system or its data to change behavior, reveal information, or degrade performance.
Data prompt leakage is unintended disclosure of sensitive material supplied to, retrieved by, or generated within an AI application prompt context.
A deepfake is synthetic or altered audio, video, or imagery made to depict a person saying or doing something they did not actually say or do.
An AI hallucination is a generated statement presented as if factual even though it is unsupported, incorrect, or invented.
Insecure output handling occurs when an application treats AI generated text as trusted code, markup, instructions, or commands without appropriate validation.
Large language model security is the protection of LLM applications, their data, tools, models, and users against misuse and unintended behavior.
Model exfiltration is unauthorized removal of model files, weights, parameters, or enough model behavior to reproduce a valuable system.
Model poisoning is deliberate interference with a model or its update process so the resulting system behaves incorrectly or contains a hidden trigger.
Model supply chain security concerns the origin and integrity of models, datasets, dependencies, tools, and build steps used in an AI system.
Instructions embedded in untrusted content that try to redirect an AI system away from its intended task.
Retrieval augmented generation risk is the possibility that retrieved documents or embeddings mislead an AI answer, cross access boundaries, or expose sensitive data.
Training data poisoning is manipulation of examples used to train or fine-tune a model to bias, degrade, or redirect its future outputs.
KEEP EXPLORING
Build context across the connected parts of cybersecurity.