Vercel Data Breach Linked to Earlier Context.ai Compromise
Hackers were able to leverage the compromise of agentic AI company Context.ai in February to take over a Google Workspace...
Security Boulevard (Original)
Trump Taxes and the Price of Privacy
There is an old saw in privacy and data breach litigation: Everyone gets paid—except, often, the victims. Plaintiffs’ lawyers receive...
Compensation vs. Burnout: The New Retention Calculus for Cybersecurity Leaders
Cybersecurity professionals are on the move. Employers may be dismayed to learn that just 34% plan to stay put. The high...
We Need a Shared Responsibility Model for AI
Over the past 6-8 months, researchers at my company discovered vulnerabilities across multiple AI tools that allowed external bad actors...
When Geopolitics Writes Your Compliance Roadmap
Cyber policy has always lagged cyber reality. Regulations arrive after breaches, frameworks emerge after failures, and accountability structures materialize long...
New IBM Security Services Aim to Counter Security Risks of AI Frontier Models
IBM wants to use AI agents to help organizations assess their ability to protect themselves from the cybersecurity risks that...
From Analytics to “Interception”: How Website Tracking Became a Wiretap Problem—and What Companies Should Do About It
There is a certain irony in watching a statute designed to prevent clandestine eavesdropping on telephone calls become one of...
AI and Executive Protection: New Risks, New Defenses
Last year, security teams sounded alarm bells when Financial Times reported a spike in AI-generated phishing attacks aimed at corporate executives. Fraudsters were...
OpenAI Follows Anthropic in Limiting Access to Its Cyber-Focused Model
It was only a week ago that Anthropic sent shockwaves through the cybersecurity industry with the announcement of Claude Mythos...
Anthropic Just Gave Defenders a Firehose. They’re Already Drowning.
Anthropic announced Project Glasswing last week with the kind of language reserved for genuine inflection points. Claude Mythos Preview, a...
Ransomware Lives On, Blending Hacktivism and Crime, Fueled by AI
Double extortion is bad enough—that’s the current tactic favored by ransomware groups—but the emerging quadruple extortion promises to further complicate...
Intoxalock Vehicle Breathalyzers Downed by Cyberattack, Leave Drivers Stranded
It’s one thing when a driver can’t blow clean into a vehicle breathalyzer and is banned from driving their car until the effects...
The Vuln Surge is Coming. CSA is Telling Us How to Survive It
There is a lot of noise right now around AI and cybersecurity. Some of it is breathless. Some of it...
OpenAI Readies Rollout of New Cyber Model as Industry Shifts to Defense
OpenAI is finalizing a cybersecurity product slated for a restricted release to select partners.The new model, as reported by...
Anthropic Unveils Restricted AI Cyber Model in Unprecedented Industry Alliance
Anthropic introduced a new cybersecurity initiative that reflects both the promise and the deep unease surrounding AI, enlisting a...
