A Chink in Palantir and Anduril’s Armour? Govini and Others Are Unsheathing the Sword When Silicon Valley Code Marches to War A U.S. Army Chinook rises over Gyeonggi Province, carrying not only soldiers and equipment but streams of battlefield telemetry, encrypted packets of sight, sound and position. Below, sensors link to vehicles, commanders to drones, … Read more
When a Single Phishing Click Becomes a Global Vulnerability – Meet the Supply Chain’s Weakest Link 1. Phishing-Driven Attack on npm Packages On 8 September 2025, maintainer Qix fell victim to a highly convincing phishing email from [email protected], which led to unauthorised password reset and takeover of his account. Attackers injected malicious code into at … Read more
Opening Scene: The Unthinkable Inside Your Digital Fortress Imagine standing before a vault that holds every secret of your organisation. It is solid, silent and built to withstand brute force. Yet, one day you discover someone walked straight in. No alarms. No credentials. No trace of a break-in. That is what the security community woke … Read more
The Oracle Cloud breach didn’t just expose 140,000 tenants, it revealed the silent danger of transitive trust across SaaS ecosystems. This post analyses the breach, outlines what could’ve been done, and offers a practical response guide for engineering and security teams. Featuring tools, trust graphs, and lessons for the road ahead.
The AI-driven SaaS boom, powered by code generation, agentic workflows and rapid orchestration layers, is producing 5-person teams with £10M+ in ARR. This breakneck scale and productivity is impressive, but it’s also hiding a dangerous truth: many of these startups are operating without a secure software supply chain. In most cases, these teams either lack … Read more
While Part 1 explored how the amendment reinforced a sanctions-led approach and repositioned AI policy within the broader cybersecurity doctrine, this second instalment shifts focus to its most understated move — the cryptographic recalibration. Executive Order 14144’s treatment of Post-Quantum Cryptography (PQC) may appear procedural at first glance, but in its omissions and realignments lies … Read more
We built and launched a PCI-DSS aligned, co-branded credit card platform in under 100 days. Product velocity wasn’t our problem — compliance was. What slowed us wasn’t the tech stack. It was the context switch. Engineers losing hours stitching Jira tickets to Confluence tables to AWS configs. Screenshots instead of code. Slack threads instead of … Read more
Introduction The AI industry’s safety narrative has been shattered. HiddenLayer’s recent discovery of Policy Puppetry — a universal prompt injection technique — compromises every major Large Language Model (LLM) today, including ChatGPT-4o, Gemini 2.5, Claude 3.7, and Llama 4. Unlike traditional jailbreaks that demand model-specific engineering, Policy Puppetry exploits a deeper flaw: the way LLMs … Read more
The Myth of a Single Cyber Superpower: Why Global Infosec Can’t Rely on One Nation’s Database What the collapse of MITRE’s CVE funding reveals about fragility, sovereignty, and the silent geopolitics of vulnerability management I. The Day the Coordination Engine Stalled On April 16, 2025, MITRE’s CVE program—arguably the most critical coordination layer in global … Read more
The Evolution of Post-Quantum Cryptography: NIST’s Fifth Algorithm Selection and Its Impact Introduction Quantum computing is no longer just a theoretical curiosity—it is advancing towards real-world applications. With these advances comes a major challenge: how do we keep our data secure when today’s encryption methods become obsolete? Recognising this urgent need, the National Institute of … Read more