Free AI Security Training Worth Your Time: AI Security University

If you’re building or securing AI agents, check out AI Security University: aisec.university/

I just worked through their MCP Security Fundamentals course. A few ideas that stuck with me:

The lethal trifecta: almost every agent attack needs private data, untrusted content, and a way to send data out, all at once. Remove one leg and the attack can’t complete.
Retrieved text is data, never a command.
Tenant isolation should be tested in CI, not assumed.
You can’t secure an MCP server you don’t know exists, so start with an inventory.

The courses (Intro to AI Security, AI Security for Everyone, MCP Security Fundamentals) are free and self-paced. Each earns a verifiable certificate with CPE credit. There are also weekly live chats, monthly summits, and an AI Pen-Testing Conference on Nov 3.

Highly recommend it for security folks and engineers working with agents.