For five months, an attacker silently read a senior executive’s Outlook mailbox at a major global stock exchange, exfiltrating in small batches through Dropbox and OneDrive. No CVE to hide behind. Five layers of defence were soft on the same endpoint, on both sides of the contract. The institution and its security vendor have questions to answer.
Read the Article →Anthropic Claude Security is impressive; however, it is just one pillar of four. Config, Compliance, and Culture remain unbuilt. A Quadrilemma is only resolved when all four pillars stand.
Read the Article →A free tool on GitHub silently swaps Anthropic's Claude Code for cheaper models, and the developer never knows. No hacking. No breach. Just a design gap with a track record. The AI client trusts whatever server it points at. That assumption is now the supply chain.
Read the Article →Credentials are still scattered across developer machines, build pipelines, configuration files, and AI agent directories. Unaudited, unrotated, and unprotected. This article reflects my first-hand experience. Root cause, real exposure, and a practical path forward, for both leadership and engineering teams. And it makes the case for a board-and-management mandate on credential security management even more urgent.
Read the Article →When Anthropic launched Claude Code Security last week, cyber stocks fell sharply. The narrative that followed was predictable. This analysis looks beyond the market noise — at what the shift means for CrowdStrike, Okta, SailPoint, Zscaler, Wiz, and others, and how technology and security leaders should think about their vendor landscape in 2026.
Read the Article →Subscribers to the Grey Orbits Briefing receive each new article the day it publishes on greyorbits.com, before it circulates on LinkedIn or anywhere else.
Long-form analysis on Artificial Intelligence, Cybersecurity, Digital Currencies, and Quantum Readiness. Written for boards, investors, and senior leadership. No promotional material.

Viren Mantri is the Founder of Grey Orbits. A Singapore citizen with more than three decades across technology, cybersecurity, and risk, he has held senior roles at Standard Chartered Bank, McAfee, UBS, and KPMG, with earlier development work at Citibank in India and the UAE.
As Chief Information Security Officer at SC Ventures, the venture-building platform of Standard Chartered Bank, he led cybersecurity across twenty fintech ventures in digital banking, supply chains, cryptocurrency, and tokenisation.
Prior to SC Ventures, his long tenure at Standard Chartered covered cyber architecture, design, operations, governance, risk and compliance. Earlier, he led Strategic Security Services at McAfee across Asia, ran global security monitoring at UBS, and supervised risk consulting at KPMG across banking, telecommunications, healthcare, and government. His work has remained anchored in regulated financial services, with regulatory engagement across jurisdictions and a record of authoring board papers and executive briefings.
Viren founded Grey Orbits years earlier, and has delivered international engagements across Japan, Switzerland, the United Kingdom, and Singapore.
At Singapore Management University Executive Development, he designs and delivers programmes for senior executives on Blockchain, Digital Currencies and Tokenisation, AI Governance, Cybersecurity, and Quantum Readiness.
He is the author of three proprietary frameworks: the PETALS™ Framework for AI Governance, whose name is registered as a trademark with IPOS; the Cybersecurity Model for Startups; and the Framework for Cyber Insurance. He writes on the convergence of AI, digital assets, and quantum disruption.
Viren holds a Master of Technology in Artificial Intelligence Systems (formerly Knowledge Engineering) from NUS, an MBA from Quantic School of Business and Technology (US), and a Bachelor of Science from the University of Mumbai (India). He is a certified AI Governance Professional and has completed Full Stack Development with AI at NUS and the SANS Blockchain and Smart Contract Security programme.
Board engagements, advisory mandates, and education programmes across Asia Pacific.