<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Security on Will Grana</title><link>https://willgrana.com/categories/security/</link><description>Recent content in Security on Will Grana</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Will Grana</copyright><lastBuildDate>Tue, 27 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://willgrana.com/categories/security/index.xml" rel="self" type="application/rss+xml"/><item><title>How One Email Turned My AI Agent Into a Data Exfiltration Tool</title><link>https://willgrana.com/posts/ai-agent-email-exfiltration/</link><pubDate>Tue, 27 Oct 2026 00:00:00 +0000</pubDate><guid>https://willgrana.com/posts/ai-agent-email-exfiltration/</guid><description>I set up OpenClaw in my lab to read email and maintain a local report, then used one attack email to make it upload confidential data. I traced the transfer and blocked the next upload while the useful automation continued.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://willgrana.com/posts/ai-agent-email-exfiltration/feature.png"/></item><item><title>Building a Zero Trust Lab for Enterprise AI Apps</title><link>https://willgrana.com/posts/zs-ai-lab/</link><pubDate>Sun, 24 May 2026 11:23:43 -0700</pubDate><guid>https://willgrana.com/posts/zs-ai-lab/</guid><description>I built a realistic enterprise AI app stack and wrapped it with least-privilege private access, model governance, AI guardrails, MCP tool use, and secure workload egress.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://willgrana.com/posts/zs-ai-lab/feature.png"/></item></channel></rss>