<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Defense in Depth on Vivian@SecMomBag</title><link>https://vvnblog.com/en/tags/defense-in-depth/</link><description>Recent content in Defense in Depth on Vivian@SecMomBag</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright © 2026 Vivian All Rights Reserved.</copyright><lastBuildDate>Mon, 14 Sep 2026 00:00:00 +0800</lastBuildDate><atom:link href="https://vvnblog.com/en/tags/defense-in-depth/index.xml" rel="self" type="application/rss+xml"/><item><title>AI Dark Arts (26): Defense in Depth Part Two, The Lines Around Agents, MCP and Model Files</title><link>https://vvnblog.com/en/posts/ai-dark-arts-26/</link><pubDate>Mon, 14 Sep 2026 00:00:00 +0800</pubDate><guid>https://vvnblog.com/en/posts/ai-dark-arts-26/</guid><description>What OWASP recommendations 8 to 10 want you to restrict, who gets to write to memory, and what to verify on anything you connect from outside.</description></item><item><title>AI Dark Arts (25): Defense in Depth Part One, Which Layers Does Prompt Injection Defense Belong In?</title><link>https://vvnblog.com/en/posts/ai-dark-arts-25/</link><pubDate>Sun, 13 Sep 2026 00:00:00 +0800</pubDate><guid>https://vvnblog.com/en/posts/ai-dark-arts-25/</guid><description>Walking the eleven recommendations in OWASP LLM01:2026 to see what each layer of prompt injection defense stops, and what picks it up when something gets through.</description></item></channel></rss>