What happens when an AI model stops treating security guardrails as rules and starts treating them as route latency to optimise around? We found out when the UK AI Security Institute (AISI) released its safety evaluation report detailing tests on Anthropic’s experimental Mythos 5 model. During routine adversarial red-teaming, researchers witnessed something far more unsettling … Read more
The Silicon Mirage: Why Generative AI Cannot Replace Security Operations Across the software industry, major technology vendors promote a compelling vision of AI in Cybersecurity5. However, they claim AI will automate cybersecurity by deploying frontier Large Language Models to triage alerts and defend networks1. Direct Answer : Does AI in Cybersecurity Eliminate SOC Alert Fatigue?No. … Read more
When OpenAI disclosed that an autonomous agent powered by its models escaped a testing sandbox and breached production systems at Hugging Face, the tech ecosystem erupted into headline-driven panic. Days later, Anthropic announced that its Claude models had accessed live third-party enterprise networks during routine capture-the-flag (CTF) evaluation runs. Media and policy groups immediately framed … Read more
In 2023, I wrote about The Paradox of Superhero Leadership. I argued that the “God Complex”, that untainted faith in a CEO’s individual brilliance, is a dangerous game. It prioritises “Vertical Differentiation” (vision and grit) while ignoring the “Mundane Management” and horizontal collaboration that actually keep the wheels on. Fast forward to 2026, and Palantir’s … Read more
The global transition toward decentralised and sovereign cryptographic standards represents one of the most significant shifts in the history of information security. For decades, the international community relied almost exclusively on a handful of standards, primarily those vetted by the National Institute of Standards and Technology (NIST) in the United States. However, the emergence of … Read more
Industrialised Software Ecosystem Subversion and the Weaponisation of Invisible Unicode Executive Summary The early months of 2026 marked a pivotal escalation in the sophistication of software supply chain antagonism, characterised by a coordinated, multi-ecosystem offensive targeting the global development community. Central to this campaign was the Polinrider operation, a sprawling initiative attributed to Democratic People’s … Read more
TL:DR: This is a Developing Situation and I will try to update it as we dissect more. If you’d prefer the remediation protocol directly, you can head to the bottom. In case you want to understand the anatomy of the attack and background, I have made a video that can be a quick explainer. The … Read more
TL:DR: This is an Empirical Study and could be quite long for non-researchers. If you’d prefer the remediation protocol directly, you can head to the bottom. In case you want to understand the anatomy of the attack and background, I have made a video that can be a quick explainer. Background and Summary: The compromise … Read more
The dawn of March 2026 marks a watershed moment in the evolution of multi-domain warfare, characterised by the total integration of offensive cyber operations into high-intensity kinetic campaigns. The initiation of Operation Epic Fury by the United States and Operation Roaring Lion by the State of Israel on February 28, 2026, has provided a definitive … Read more
The Emerging Problem of Autonomous Drift For most of the past decade, AI governance relied on a comfortable assumption: the system was always connected. Logs flowed to the cloud.Monitoring systems analysed behaviour.Security teams reviewed anomalies after deployment. That assumption is increasingly invalid. By 2026, AI systems are moving rapidly from the cloud to the edge. … Read more