https://torinblair-sitepages.pages.dev/ AppSec, dotnet and database engineer. Currently focusing on the shifts in the threatscape for Artificial Intelligence and roadmaps for Post Quantum Cryptography https://torinblair-sitepages.pages.dev/blog/ai/ai-coding-and-sensitive-security-information https://torinblair-sitepages.pages.dev/blog/ai/ai-coding-and-sensitive-security-information Wed, 16 Sep 2026 12:59:03 -0600 I decided to test how well Claude Code handles sensitive information, and the results were revealing. Claude can generate reliable code, test it, iterate on it, write benchmark tests, and ensure it functions per the… https://torinblair-sitepages.pages.dev/blog/secure-development/protecting-secrets-in-the-age-of-agentic-attacks https://torinblair-sitepages.pages.dev/blog/secure-development/protecting-secrets-in-the-age-of-agentic-attacks Tue, 15 Sep 2026 15:44:29 -0600 Modern defensive patterns for preventing autonomous credential compromise Agentic attacks have changed the threat landscape. Once an autonomous adversarial system gains access to a credential, it can pivot, escalate… https://torinblair-sitepages.pages.dev/blog/secure-development/cryptographic-modernization-must-include-cryptographic-modularization https://torinblair-sitepages.pages.dev/blog/secure-development/cryptographic-modernization-must-include-cryptographic-modularization Fri, 04 Sep 2026 10:56:51 -0600 We are on the horizon of two significant technological shifts: Agentic Artificial Intelligence and Quantum Computing. Both are a threat to the existing cryptographic structures that protect our most sensitive data… https://torinblair-sitepages.pages.dev/blog/ai/chain-of-ownership-for-accountability-with-agentic-actions-and-ai-models https://torinblair-sitepages.pages.dev/blog/ai/chain-of-ownership-for-accountability-with-agentic-actions-and-ai-models Wed, 02 Sep 2026 16:15:38 -0600 Disclaimer: This is a new idea today, it is not fully baked, nor is it implemented. But it is a place to start for a chain of accountability ownership with our agentic actions. As organizations begin adopting agentic… https://torinblair-sitepages.pages.dev/blog/ai/designing-for-attack-containment-and-rebuild https://torinblair-sitepages.pages.dev/blog/ai/designing-for-attack-containment-and-rebuild Tue, 01 Sep 2026 11:10:00 -0600 Designing for perfect prevention of attacks with an AI adversary is not possible at this time. Now, more than ever, is the time to plan for when you are attacked, not if. Preparing for Agentic Attacks: What You Can Do… https://torinblair-sitepages.pages.dev/blog/ai/preparing-for-the-growth-curve-drop-with-artificial-intelligence https://torinblair-sitepages.pages.dev/blog/ai/preparing-for-the-growth-curve-drop-with-artificial-intelligence Thu, 27 Aug 2026 11:55:13 -0600 The singularity didn’t move further away, our expectations were based on a phase of AI that will never repeat. The model has consumed the world’s historical knowledge. From here forward, progress depends on real time… https://torinblair-sitepages.pages.dev/blog/ai/a-very-real-caution-about-code-generation-tools https://torinblair-sitepages.pages.dev/blog/ai/a-very-real-caution-about-code-generation-tools Tue, 25 Aug 2026 16:12:27 -0600 We hear a lot about agentic code generation, the use of AI models to create software, but there’s a deeper problem under the surface. What happens when the model’s training includes code that later turns out to be… https://torinblair-sitepages.pages.dev/blog/ai/design-examples-with-ai https://torinblair-sitepages.pages.dev/blog/ai/design-examples-with-ai Tue, 25 Aug 2026 14:57:14 -0600 For Artificial Intelligence driven or augmented applications, it’s critical that we begin with determining what policy needs to be applied to agentic actions and how we authorize those actions against a known user’s… https://torinblair-sitepages.pages.dev/blog/ai/dual-model-ai-security-for-resilient-threat-detection https://torinblair-sitepages.pages.dev/blog/ai/dual-model-ai-security-for-resilient-threat-detection Fri, 21 Aug 2026 09:57:24 -0600 Overview As organizations adopt AI‑driven security tooling, they also inherit a new risk: AI models can fail in correlated ways, creating a single point of failure in threat detection. A dual‑model approach — using two… https://torinblair-sitepages.pages.dev/blog/ai/should-ai-take-that-autonomous-action-probably-not https://torinblair-sitepages.pages.dev/blog/ai/should-ai-take-that-autonomous-action-probably-not Thu, 20 Aug 2026 10:22:11 -0600 Classifying AI Actions Into Risk Levels Organizations have long classified data sensitivity to control who can access it, what can be done with it, and when it can be removed. We now need the same discipline for AI… https://torinblair-sitepages.pages.dev/blog/ai/ais-next-frontier-autonomous-discovery-and-its-implications-for-engineers https://torinblair-sitepages.pages.dev/blog/ai/ais-next-frontier-autonomous-discovery-and-its-implications-for-engineers Wed, 19 Aug 2026 13:59:17 -0600 This is an existing post from a security perspective. And yes, I used Microsoft Copilot to translate it directly to engineer. AI is transitioning from passive inference systems to active discovery engines. Instead of… https://torinblair-sitepages.pages.dev/blog/ai/ais-next-frontier-autonomous-discovery-and-its-implications-for-leadership https://torinblair-sitepages.pages.dev/blog/ai/ais-next-frontier-autonomous-discovery-and-its-implications-for-leadership Wed, 19 Aug 2026 13:33:36 -0600 AI is moving beyond summarizing human knowledge and entering a phase where it can generate new scientific insights through simulation, optimization, and autonomous reasoning loops. This shift represents a step‑change in… https://torinblair-sitepages.pages.dev/blog/ai/protecting-an-ai-agent-from-unauthorized-operations https://torinblair-sitepages.pages.dev/blog/ai/protecting-an-ai-agent-from-unauthorized-operations Wed, 19 Aug 2026 13:13:51 -0600 I’ve been researching and reviewing what can be done to better protect against improper agentic actions. The list of mitigations may be partial, but it’s an initial engineering design for protecting ourselves from the…