Security & Risk
What breaks, who is liable, and what an agent can reach once it is already inside.
Showing 81–99 of 99 posts
-
83% of Companies Plan to Deploy AI Agents. 29% Can Secure Them.
Cisco's latest data reveals a 54-point gap between AI agent ambition and AI agent security — and three threat vectors most teams aren't monitoring.
-
The EU Just Gave You More Time on AI Compliance. The Requirements Got Harder.
The EU AI Act's high-risk deadlines just slid to 2027. Don't mistake breathing room for simplification.
-
Microsoft Spent $13B on OpenAI, Then Built Cowork on Claude
Microsoft's flagship M365 agent feature runs on Anthropic's model. If they're going multi-model, so should you.
-
An AI Agent Hacked McKinsey's AI With a 25-Year-Old Exploit
An autonomous offensive agent breached McKinsey's internal AI platform in two hours using SQL injection. The AI was sophisticated.
-
GPT-5.4 Can Click Your Buttons Now. Think About That.
OpenAI's latest model ships with native computer use. The capability is real. The security implications should keep you up at night.
-
Your AI Assistant Can't Tell You From an Attacker
A security researcher sent himself an email. Nothing fancy — no malware, no exploits, no infrastructure. Just a message that said, in effect, 'Hey, it's me!'
-
OpenAI Took the Pentagon Deal. What's Your Exit Plan?
Anthropic refused. OpenAI said yes within hours. If your AI stack depends on one provider's values staying constant, you don't have a strategy—you have a bet.
-
OWASP Published an MCP Security Guide. You Should Be Worried.
MCP adoption is outpacing security controls. OWASP and Microsoft both published governance guidance in February. That's not coincidence—it's alarm bells.
-
Claude 3.5 Haiku, 3.7 Sonnet, GPT-4o: The Deprecation Wave Is Here
Three major models entering end-of-life in the same window. If you hardcoded model IDs, migration planning just became urgent.
-
150,000 API Keys Leaked. Anyone Surprised?
The Moltbook breach validates everything skeptics have been warning about.
-
SoN Vol 2, Issue 3: The Metric Mandate
The most common answer to “What’s the goal of this AI project?” is depressingly consistent: “To improve efficiency.” …and that’s not a goal. That’s a wish. The Problem with Vague…
-
DeepSeek Didn't Just Train Better—They Changed How Transformers Think
The mHC architecture isn't about scaling harder. It's about thinking smarter.
-
SoN 32: When They Take Over Your Email
Last weekend, a close family member lost access to their email account. Not “forgot the password” lost. Fully taken over — the attackers changed the recovery email, changed the…
-
SoN 29: The Godfather of AI’s Warning Isn't What You Think It Is
A slight departure this week towards something more topical. Geoffrey Hinton won the 2024 Nobel Prize in Physics for inventing the neural networks that power modern AI, Then he…
-
SoN 27: Your AI Voice Is a Security Vulnerability
Last week, I showed you how to make AI sound like you. This week, I'm going to explain why you shouldn't. Before we dive in: This week I'm talking about AI-generated clones of…
-
SoN 21: The AI Capability Trap
MIT researchers have identified a troubling paradox in enterprise AI adoption. While AI capabilities improved 280-fold in cost efficiency since 2022, enterprise failure rates have…
-
The 95% AI Failure Rate Nobody's Talking About (And What to Do About It)
Dear Reader, Air Canada recently learned an expensive lesson about AI implementation. Their customer service chatbot provided incorrect information about bereavement fares, and…
-
AI Browsers: When Your Browser Becomes Your Assistant
Discover the future of browsing - AI-powered browsers that handle tasks, summarise, and assist as you work online.
-
💾 The Download #006: Content ownership, BlueSky, critical thinking, voice cloning and more.
#006 I hope this newsletter finds you, Reader, and that it finds you well. This week has flown by, though I managed to spend some time working on the porch with my 18-year-old…
