AI Governance

Prompt injection is the new SQL injection — featured image

Prompt Injection Is the New SQL Injection: The 20-Year-Old Mistake AI Is Repeating in 2026

Post author:Prabhu Kalyan Samal
Post published: September 5, 2026
Post category:AI Security

SQL injection stayed in the OWASP Top 10 for 20+ years. Prompt injection is the same bug with worse permissions — here’s the history, real examples, and the defense playbook.

AST09 & AST10: Governance and Cross-Platform Reuse

Post author:Prabhu Kalyan Samal
Post published: August 26, 2026
Post category:AI & Agent Security Emerging Tech & Architecture

The finale of our OWASP Agentic Skills Top 10 series. AST09: one-line skill installs that no inventory, IAM system, or SOC ever sees — 800+ malicious skills circulating, 83% of organizations deploying agentic AI, 29% ready. AST10: porting skills across platforms silently drops manifests, permissions, and risk tiers. With the Bilateral Receipt Pattern, EU AI Act Article 12, and the Universal Skill Format proposal.