Latest Articles
AI Catch-22
Six months ago in AI looks like a medieval era. Three researchers from METR spent six days analysing the July agent incident at OpenAI and Hugging Face. The instrument they used was another frontier AI. That is the paradox. But then a harder question follows. What if the analyst AI has itself been poisoned? Three parts: the METR incident and the poisoning question; how to think about Zero Trust and MDR, with specific things to demand from your vendors in writing; and how to filter the wider AI reading list, from mathematics to cheating to rebuilding malware to the warning that this ends in people being killed.
An Attacker Quietly Read a Global Stock Exchange Executive’s Inbox for Five Months
For five months, an attacker silently read a senior executive’s Outlook mailbox at a major global stock exchange, exfiltrating in small batches through Dropbox and OneDrive. No CVE to hide behind. Five layers of defence were soft on the same endpoint, on both sides of the contract. The institution and its security vendor have questions to answer.