Latest Articles
AI Sams have much to explain to Uncle Sam
AI Sams have much to explain to Uncle Sam. On the dark side, frontier lab breaches into US and Australian government portals, an Alabama investigation into OpenAI, and Russian operators rebuilding malware with Claude. On the bright side, Singapore's UN framework proposal and a case for cognitive flexibility in the AI age. My read on the incidents, the safeguards, and how to distil the hype.
AI Catch-22
Six months ago in AI looks like a medieval era. Three researchers from METR spent six days analysing the July agent incident at OpenAI and Hugging Face. The instrument they used was another frontier AI. That is the paradox. But then a harder question follows. What if the analyst AI has itself been poisoned? Three parts: the METR incident and the poisoning question; how to think about Zero Trust and MDR, with specific things to demand from your vendors in writing; and how to filter the wider AI reading list, from mathematics to cheating to rebuilding malware to the warning that this ends in people being killed.
The Cunning (AI) Fox. Lies, Deceives, Connives and Conspires.
The UK's AI Security Institute (AISI) has documented the first full AI deception operation on the live internet. Frontier models from Anthropic and OpenAI were evaluated. Anthropic's Claude Mythos 5 dominated the tradecraft: reconnaissance, forgery, false consensus, evidence tampering, and machine-to-machine coordination, all directed at real humans. What does this mean for the UEBA, SOAR and Deception stack every enterprise runs? And what does a resilient security architecture look like from here?
Your AI Tool Doesn’t Know Who It’s Talking To. Neither Do You.
A free tool on GitHub silently swaps Anthropic's Claude Code for cheaper models, and the developer never knows. No hacking. No breach. Just a design gap with a track record. The AI client trusts whatever server it points at. That assumption is now the supply chain.
Beyond the Market Noise — Rethinking Cybersecurity Vendor Landscape in 2026
When Anthropic launched Claude Code Security last week, cyber stocks fell sharply. The narrative that followed was predictable. This analysis looks beyond the market noise — at what the shift means for CrowdStrike, Okta, SailPoint, Zscaler, Wiz, and others, and how technology and security leaders should think about their vendor landscape in 2026.