<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cybersecurity · yesiddo</title><link>https://yesiddo.com/en/topics/cybersecurity/</link><description>Cybersecurity, AI and coding with agents: what I read, test and keep at hand.</description><language>en-US</language><lastBuildDate>Wed, 14 Oct 2026 11:00:00 +0200</lastBuildDate><atom:link href="https://yesiddo.com/en/topics/cybersecurity/index.xml" rel="self" type="application/rss+xml"/><item><title>Sovereignty and open models: the common thread of ai-PULSE 2026</title><link>https://yesiddo.com/en/notes/ai-pulse-2026-sovereignty-and-open-models/</link><pubDate>Wed, 14 Oct 2026 11:00:00 +0200</pubDate><guid isPermaLink="false">notes/ai-pulse-2026-souverainete-et-modeles-ouverts/index.en.md</guid><description>The word sovereignty was everywhere at Station F, right down to the signage. Behind the slogan, a fairly coherent strategy: open weights, GPUs in Europe and the middle layer.</description></item><item><title>Agent identity, a field still wide open</title><link>https://yesiddo.com/en/notes/ai-pulse-2026-agent-identity/</link><pubDate>Wed, 14 Oct 2026 10:00:00 +0200</pubDate><guid isPermaLink="false">notes/ai-pulse-2026-identite-des-agents/index.en.md</guid><description>Zalando runs agents across 2,700 microservices. Their answer to scattered secrets is open source, and it fits in one RFC.</description></item><item><title>ai-PULSE 2026: what I took away from the day</title><link>https://yesiddo.com/en/notes/ai-pulse-2026-takeaways/</link><pubDate>Wed, 14 Oct 2026 08:00:00 +0200</pubDate><guid isPermaLink="false">notes/ai-pulse-2026-compte-rendu/index.en.md</guid><description>A report on Scaleway's AI conference at Station F: the opening keynote, sovereignty, inference economics, agent identity. With links to the detailed write-ups.</description></item><item><title>ANSSI: security recommendations for a generative AI system</title><link>https://cyber.gouv.fr/sites/default/files/document/Recommandations_de_s%C3%A9curit%C3%A9_pour_un_syst%C3%A8me_d_IA_g%C3%A9n%C3%A9rative.pdf</link><pubDate>Mon, 12 Oct 2026 10:00:00 +0200</pubDate><guid isPermaLink="false">liens/anssi-securite-ia-generative.en.md</guid><description>&lt;p&gt;35 recommendations, from training to production: manipulation, infection, exfiltration. The linked document is in French.&lt;/p&gt;</description></item><item><title>ANSSI × BSI: security of AI programming assistants</title><link>https://cyber.gouv.fr/actualites/lanssi-et-le-bsi-publient-leurs-recommandations-de-securite-concernant-les-assistants-de-programmation-bases-sur-lia/</link><pubDate>Mon, 12 Oct 2026 09:30:00 +0200</pubDate><guid isPermaLink="false">liens/anssi-bsi-assistants-programmation.en.md</guid><description>&lt;p&gt;The French-German recommendations for coding with an AI assistant without exposing your code or your delivery pipeline. The page is in French.&lt;/p&gt;</description></item><item><title>The lethal trifecta for AI agents</title><link>https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/</link><pubDate>Mon, 12 Oct 2026 09:10:00 +0200</pubDate><guid isPermaLink="false">liens/lethal-trifecta.en.md</guid><description>&lt;p&gt;Private data, untrusted content, an exfiltration channel: the combination an agent must never bring together.&lt;/p&gt;</description></item><item><title>OWASP Top 10 for Agentic Applications (2026)</title><link>https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/</link><pubDate>Mon, 12 Oct 2026 09:00:00 +0200</pubDate><guid isPermaLink="false">liens/owasp-top-10-agentic-2026.en.md</guid><description>&lt;p&gt;Goal hijacking, tool misuse, memory poisoning: the list of risks specific to autonomous agents.&lt;/p&gt;</description></item></channel></rss>