A live LLM compromise is rarely just one bug, it is a chain of symptoms that must be tied back to the right OWASP category fast. This course gives security teams and AI/ML engineers a defender’s view of the major threat patterns in LLM and AI applications, with practical ways to think about containment, hardening, validation, and monitoring. By the end, learners can classify attacks, choose controls that interrupt them, and review an LLM system with a repeatable security lens.
The course covers prompt injection, sensitive information disclosure, hidden context exposure, excessive agency, improper output handling, supply chain risk, data and model poisoning, unbounded consumption, vector and embedding weaknesses, and misinformation. It also covers verification, testing, monitoring signals, and an OWASP-mapped review workflow for LLM security assessments.