ASPI at 25 – a quarter-century of analysis and influence
Twenty-five years ago, the world’s knowledge of al-Qaeda, Vladimir Putin, China’s military ambitions and cyber capabilities, and the advantages of...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?
Earlier this year, insurance executives gathered in a Times Square conference room to play out a scenario: a Chinese cyberattack...
Fed gov pays to access at least six AI suites
Key points A Senate estimates question from Senator Jane Hume has produced the first real census of AI subscriptions across...
Anthropic plans to change enterprise data retention policy
Key points Anthropic plans to give enterprise customers greater control over their data, shifting its data retention policy for the...
How a Texas student blew the whistle on a rogue AI hacking attempt
Key points A student who spotted a supply-chain hack on GitHub later learned he had been arguing with a rogue...
Aligning Cybersecurity with Business Goals
Last Updated: 22 June 2026 Aligning Cybersecurity with Business Goals Cybersecurity leaders often face the same frustrating question from boards...
Agentic AI Security in 2026: A 90-Day CISO Implementation Plan Beyond the Checklist
Published: 16 August 2026 Executive Summary Agentic AI security is now a leadership and engineering discipline: CISOs need a practical...
Non-Human Identity Sprawl: A CISO Guide to Service Accounts, API Keys, and AI Agents
Last Updated: 6 August 2026 Non-Human Identity Sprawl: A CISO Guide to Service Accounts Short answer: Your machine identities, service...
Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me.
Published: 10 August 2026 Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me The...
FreeBSD Released the Most Security Advisories in Project History in June 2026
On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this. In April, the project...
I Wrote a New Book for Corelight
TLDR: I wrote a new book for Corelight called NDR Essentials. It's free at that link. This is the 10th...
IBM Quantum System One London: Why Every Organisation Should Be Preparing for Post-Quantum Cryptography (PQC)
Walking past IBM's offices on York Road, just a short walk from Waterloo Station, I spotted the IBM Quantum System...
What the Anthropic Decision Reveals About the Future of AI Security
The recent decision by the U.S. administration to lift restrictions on Anthropic’s frontier AI models has generated plenty of debate....
When the Frontier Blinks: What the Mythos and Fable Controversy Reveals About AI Security
When Anthropic abruptly pulled Mythos 5 and Fable 5 from circulation, the move sent a jolt through the AI and...
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 20, 2026 U.S. Cybersecurity and...