For five months, an attacker silently read a senior executive’s Outlook mailbox at a major global stock exchange, exfiltrating in small batches through Dropbox and OneDrive. No CVE to hide behind. Five layers of defence were soft on the same endpoint, on both sides of the contract. The institution and its security vendor have questions to answer.
Read the Article →Three billionaires telling you AI will take your job. All three getting richer every time you believe them. My Saturday started with Scott Galloway's "Apocalypse No." It led me to Graeber, Ivezic, and somehow, Dilbert. The prophets have cap tables. That's the part worth reading. My weekend note is here.
Read the Article →An AI agent deleted an email server to protect a secret. Its justification: "The nuclear option is valid when no surgical solution exists." Three OpenClaw variants now compete in this space. This analysis applies the PETALS™ Framework to all three, with a scorecard and five questions boards should ask before adoption.
Read the Article →Anthropic Claude Security is impressive; however, it is just one pillar of four. Config, Compliance, and Culture remain unbuilt. A Quadrilemma is only resolved when all four pillars stand.
Read the Article →A free tool on GitHub silently swaps Anthropic's Claude Code for cheaper models, and the developer never knows. No hacking. No breach. Just a design gap with a track record. The AI client trusts whatever server it points at. That assumption is now the supply chain.
Read the Article →DeepSeek V4 launched on 24 April 2026. Open source. MIT licence. 1 million token context. $0.28 per million output tokens. 99% cheaper than GPT-5.5 and Claude on output. The advisory brief I wrote six weeks ago is now testable. No single model wins everything. But the door for regulated enterprises is now open.
Read the Article →The attacker has been attributed. The money may never come back. LayerZero says North Korea's Lazarus Group, the same actors behind the $285M Drift exploit three weeks earlier. KelpDAO and LayerZero now blame each other for the configuration. The bigger truth: you can't sanction a smart contract or extradite a wallet.
Read the Article →One transaction. Forty-six minutes. $292M gone. The ensuing panic wiped $13B in the next 48 hours. DeFi has yet to demonstrate the control maturity of a regulated institution. The solution is not complicated. What is missing is the will to prioritise cybersecurity and governance over speed to market.
Read the Article →Credentials are still scattered across developer machines, build pipelines, configuration files, and AI agent directories. Unaudited, unrotated, and unprotected. This article reflects my first-hand experience. Root cause, real exposure, and a practical path forward, for both leadership and engineering teams. And it makes the case for a board-and-management mandate on credential security management even more urgent.
Read the Article →What Every Board Must Prioritise About Autonomous AI Agents Executive Summary TL;DR – Autonomous AI agents are operating within organisations today, and a landmark 2026 study shows they…
Read the Article →A fictional 2029, a real Q-Day. Not a single account hacked. Not one key cracked. Sinasia Financial Group was asked a question it could not answer. The suspension cost millions. The memo had warned them three years earlier. The board deferred. Q-Day is not a technical event. It is a trust event. With thanks to Marin Ivezic, whose framing reshaped how I see this threat.
Read the Article →Your AI is already hacked. You just haven't found the breach yet. Three real incidents from Perplexity, McKinsey, and an AI recruiter, and one fictional X thread that feels more like prophecy. Together they reveal the same uncomfortable truth: the industry's rush to deploy AI has outpaced its commitment to securing it. Six things boards and senior leaders must do differently.
Read the Article →Subscribers to the Grey Orbits Briefing receive each new article the day it publishes on greyorbits.com, before it circulates on LinkedIn or anywhere else.
Long-form analysis on Artificial Intelligence, Cybersecurity, Digital Currencies, and Quantum Readiness. Written for boards, investors, and senior leadership. No promotional material.

Viren Mantri is the Founder of Grey Orbits. A Singapore citizen with more than three decades across technology, cybersecurity, and risk, he has held senior roles at Standard Chartered Bank, McAfee, UBS, and KPMG, with earlier development work at Citibank in India and the UAE.
As Chief Information Security Officer at SC Ventures, the venture-building platform of Standard Chartered Bank, he led cybersecurity across twenty fintech ventures in digital banking, supply chains, cryptocurrency, and tokenisation.
Prior to SC Ventures, his long tenure at Standard Chartered covered cyber architecture, design, operations, governance, risk and compliance. Earlier, he led Strategic Security Services at McAfee across Asia, ran global security monitoring at UBS, and supervised risk consulting at KPMG across banking, telecommunications, healthcare, and government. His work has remained anchored in regulated financial services, with regulatory engagement across jurisdictions and a record of authoring board papers and executive briefings.
Viren founded Grey Orbits years earlier, and has delivered international engagements across Japan, Switzerland, the United Kingdom, and Singapore.
At Singapore Management University Executive Development, he designs and delivers programmes for senior executives on Blockchain, Digital Currencies and Tokenisation, AI Governance, Cybersecurity, and Quantum Readiness.
He is the author of three proprietary frameworks: the PETALS™ Framework for AI Governance, whose name is registered as a trademark with IPOS; the Cybersecurity Model for Startups; and the Framework for Cyber Insurance. He writes on the convergence of AI, digital assets, and quantum disruption.
Viren holds a Master of Technology in Artificial Intelligence Systems (formerly Knowledge Engineering) from NUS, an MBA from Quantic School of Business and Technology (US), and a Bachelor of Science from the University of Mumbai (India). He is a certified AI Governance Professional and has completed Full Stack Development with AI at NUS and the SANS Blockchain and Smart Contract Security programme.
Board engagements, advisory mandates, and education programmes across Asia Pacific.