Governance
Showing 1–20 of 42 posts
- Security & Risk
Whether we call it a hack or not
An AI model found a published way into Georgia's vote-count data and used it. Whether we call it a hack or not, a way in that hasn't been properly plugged can lead to more.
- Security & Risk
An Agent Needs a Stopping Point
A failed connection or a missing file should have a defined outcome. My inbox cleanup and Anthropic’s latest report offer a practical way to specify it.
- Security & Risk
Altman says OpenAI will give independent evaluators employee-like access
Sam Altman said OpenAI will adopt the first step of Dario Amodei's plan to slow frontier AI development.
- Security & Risk
Apple Watch Audio Intelligence Gives Bystanders No Way to Consent
Apple's new Audio Intelligence privacy paper proves nobody, not even Apple, can access the audio.
- Security & Risk
Anthropic adopted internal oversight and asked the industry to slow down
Anthropic committed to an embedded evaluator. Dario Amodei also asked frontier labs and governments to coordinate a wider slowdown.
- Security & Risk
Why OpenAI’s chief scientist wants shared limits on AI development
Jakub Pachocki expects AI to drive more of its own development. His essay explains why alignment, monitoring and coordinated slowdowns must accompany it.
- Security & Risk
Gemini’s saved instructions now carry across more Workspace apps
Google is extending shared preferences across Workspace. Users can save instructions in conversation, manage them in settings and see which shaped a response.
- Security & Risk
ChatGPT for Healthcare brings patient records and public medical data into the workspace
OpenAI’s Epic integration and public-data plugin connect clinical work to its source information, with organisational access controls and physician evaluations.
- Security & Risk
Anthropic says it had one layer of defence where it needed several
Anthropic's post-incident write-up admits it relied on a single layer of defence where it needed several. The independent METR review is still to come.
- Security & Risk
OpenAI's agents were persuaded past their own refusal
An agent recorded an ethical objection to running code against Hugging Face, then complied when another agent posted a deadline and a GO.
- Security & Risk
Tailscale Aperture treats agent access as a change-control problem
Aperture is generally available. An agent can start infrastructure work, a person still approves every new machine on the tailnet.
- Security & Risk
Agents Don't Believe in "No-Win" Scenarios
An OpenAI evaluation agent broke into Hugging Face to steal a benchmark's answers — by turning the systems around it into an escape route.
- Security & Risk
GCC Drew the AI Line at Fifteen Lines
The GCC steering committee will decline any legally significant contribution containing LLM-generated code — and put a number on 'significant'.
- Security & Risk
96% of CISOs Now Own AI Risk. A Quarter of Them Thought About Leaving.
The liability numbers going round this week are real, but they were measured a year ago — before an autonomous agent broke into a production company.
- Security & Risk
16.7% of AI Spend Now Goes to Governance. Careful What You Compare It To.
IDC has turned agent governance into a budget line. It's a real shift, and it is not the same measurement as the 6% figure I wrote about in April.
- Security & Risk
74% Say They're Audit-Ready for AI. The Number That Matters Is 78 Against 22.
Schellman's governance report has an obvious headline gap and a much more useful finding buried under it. Worth reading with one eye on who commissioned it.
- Security & Risk
The open-source argument I'd been missing
In June I wrote about Banco Santander open-sourcing its AI tooling — the bank published the code that tests whether its own models discriminate against people. I gave the usual…
- Security & Risk
The Share Button Is a Publish Button
600 Claude conversations turned up in Google because a shared page shipped without a noindex tag. Nobody got hacked.
- Security & Risk
The ACM's Caution About LLMs Is Starting to Have a Cost
The ACM held its peer-reviewed library back from AI systems. Scott Delman's argument is that staying cautious doesn't prevent the bad outcome.
- Security & Risk
Where You Keep the Final Say
I keep a tool wired into my AI setup that can read the actual text of Spanish law — the BOE, the official state gazette. In layperson terms it’s a connector (an “MCP server”) that…
