Security & Risk
What breaks, who is liable, and what an agent can reach once it is already inside.
Showing 41–60 of 99 posts
-
Fable: here in an instant, then gone
Fable: here in an instant, then gone Last week I wrote about Fable 5 — Anthropic’s newest model — and the catch: it was only on the normal subscription plans for a short window. I…
-
The most powerful Claude yet — and the part you can't have
Claude Fable 5 Anthropic dropped a new model yesterday, and I’ve spent the time since doing what I always do with a new one — reading past the headline to find the catch. With…
-
SoN 2.19: It's 10pm. Do you know what your agents are doing? (Free)
The Context Gap (Free) Dear Reader, Who’s watching your AI agents? This past week alone: Codex shipped its Chrome extension, giving OpenAI’s agent access to your signed-in Gmail,…
-
SoN 2.17: You Can't Cost-Reduce Yourself to Greatness (Free Edition)
You Can't Cost-Reduce Yourself to Greatness (Free Edition) I caught a Seth Godin interview at the beginning of the week and one line in particular caught my attention. He said…
-
SoN Vol 2, Issue 14: What about everything we learned? (Free Edition)
What about everything we learned? (Free Edition) Hey there, What about everything we learned? Last week we sent the shutdown email for MyCityZen. It was a small product, but there…
-
97% Expect a Breach. 6% Are Paying for It.
Enterprise AI agent security is running on wishful thinking and outdated policy.
-
Agent Security Just Got Real CVEs
Prompt injection chains to RCE in CrewAI. 22-second attacker breakout. Human-in-the-loop is no longer a security control.
-
Anthropic Didn't Block Abuse. They Blocked Competition.
The OpenClaw subscription ban isn't about fair use — it's Anthropic asserting platform control while shipping their own replacement.
-
Agent Identity Is the Infrastructure Gap Nobody Wants to Admit
Okta is betting that agent identity management becomes as fundamental as user identity management was for SaaS. They might be right.
-
MCP Just Changed Hands. Watch What Happens Next.
Anthropic donating MCP to the Linux Foundation is good governance — and a signal that the easy days of fast iteration are probably over.
-
Your AI Proxy Layer Just Became a Target
The LiteLLM supply chain attack isn't just a security story — it's an infrastructure story for anyone building with AI tooling.
-
Your Code Review Process Isn't Built for This Volume
AI-generated code is hitting production faster than review processes can absorb it — that's a supervision problem, not an AI problem.
-
Grammarly's Lawsuit Is About Identity, Not Just Data
A new class action against Grammarly draws a line most AI training lawsuits haven't: using real people's names and reputations, not just their words.
-
The Safety Company Keeps Leaking
Anthropic's recurring security incidents reveal a tension worth naming: operational security is hard, even for companies whose brand is built on being careful.
-
The New Shadow IT Isn't Employees Using ChatGPT
AI agents are generating mobile app traffic that security teams can't see. Shadow AI moved from 'people using tools' to 'tools using tools'.
-
Perplexity Pulled a Perk and Hoped Nobody Would Notice
Perplexity Pro quietly removed $5 monthly API credits from its $20 plan. No announcement, no changelog.
-
Your AI Provider's Ethics Are Now a Business Risk
Anthropic refused Pentagon weapons contracts and got sanctioned. A court blocked it. Here's what that means if you build on Claude.
-
Apple Just Validated Your Multi-AI Approach
Apple is opening Siri to rival AI assistants in iOS 27 — a bet that the routing layer matters more than the model.
-
The Money Just Noticed the Agent Security Problem
Bessemer's new report on AI agent security says what practitioners have known for months. Now comes the flood.
-
The Government Just Told You to Stop Vibe Coding Without Guardrails
The UK's NCSC warns that AI-generated code is creating security risks faster than teams can catch them. The fix isn't stopping — it's checking.
