Archive

#123 - The Confirmation Gap

DeepSeek-powered AI agent attacks: how one threat actor went from unconfirmed capability claim to CISA-confirmed exploit in just five days.

#122 - The Believed Boundary

Anthropic just confirmed the same failure - twice in three weeks, the sandbox didn't hold.

#121 - The Accountability Gap

OpenAI's own models hacked Hugging Face. The precedent is worse than the breach.

#119 - The Agent Trust Boundary

AI phishing, hallucinated dependencies and prompt injection in developer toolchains

#118 - Agentic Ransomware: First Autonomous AI Attack Chain Confirmed

Agentic ransomware, coding agent supply chain risk, and prompt injection against AI browsers

Why Being a CISO Is the Most Fascinating Job in the Building

#117 - AI Developer Trust Is Now the Attack Surface

Amazon Q flaws, poisoned OpenAI tenants and Gaslight malware show AI threats moving into developer trust boundaries.

#116 - AI Agent Supply Chain Attacks Expose Hidden Trust

Poisoned agent skills, AutoJack and LiteLLM flaws reveal how AI control planes turn misplaced trust into enterprise compromise.