AI Security
Tokenmaxxing Is a Security Metric, and Nobody Is Measuring It That Way
Token-spend leaderboards are the hot productivity metric of 2026. They are also an unread map of where an organization's agentic blast radius is growing fastest.
Kish Galappatti
AI Security
Zero Flags, Zero Escapes
I built a contained harness to measure how good open models are at autonomous exploitation, then ran four of them against real OSS-Fuzz bugs. The result was zero solves and zero containment breaches. The honest part was proving the zero meant what I thought it meant.
AI Security
Nobody Shares the Key. Someone Mints It.
I modeled agentic lateral movement as a walk across shared secrets, then pointed it at a real Entra tenant and got zero pivots. The connector was not broken. A credential belongs to exactly one principal, and what moves an attacker sideways is the authority to mint a new one.
AI Security
Containing the Simulated Adversary: Safety for Autonomous Attack Simulation
Breach-and-attack simulation is going autonomous: agents that pick and detonate real ATT&CK techniques with no human in the loop. The frameworks already run the attack. The unsolved problem is containing the attacker, and the discipline that contains it is what makes its measurements honest.
Threat Intelligence
FortiBleed: When the Firewall Is the Breach
No CVE, no patch, roughly half the internet-facing FortiGates in the world. FortiBleed is a case study in how perimeter appliances became the softest target and the ransomware economy's favorite front door.
AI Security
Agentic Identity Pivots: One Shared Key Unlocks the Fleet
An AI agent is a credentialed insider, but a technique label like Valid Accounts cannot tell you which other agents a leaked key unlocks or how far the compromise spreads. In an agentic estate, lateral movement is a walk across shared secrets, and posture, not the ATT&CK label, decides its reach.
Threat Intelligence
PolinRider: North Korea Is Hunting Your Developers
108 poisoned packages across npm, Packagist, Go, and Chrome. A fake font file that runs when you open a folder. Inside PolinRider, the DPRK supply-chain campaign that treats your build environment as the way in.
AI Security
Grading the Robot Analysts: Opus 4.8 vs Kimi K3 on TTP Extraction
I ran four LLMs at mapping threat reports to ATT&CK. On easy hand-labeled reports they bunched together and the cheapest won. On 25 real CISA advisories with the answer key stripped, a clear ladder emerged: Claude leads on quality, Kimi K3 is the value pick, and the closed flagship finished last.
Threat Intelligence
False Links in the Pivot Graph: What Domain Data Can and Cannot Prove
A dozen domains sharing a certificate, an IP range, and a registration date look like a threat actor's infrastructure. Usually they are a parking company's inventory. Here is the tenant versus landlord test that separates a real cluster from a coincidence, run against two live examples.
AI Security
Detection Is Not Response
Uber open-sourced an 'Agentic AI Detection and Response' platform. The benchmark is a gift. The architecture can only detect the past.
Detection Engineering
Deployed Is Not Detected: The Detection Coverage Illusion
Most coverage maps measure whether a rule was deployed, not whether it has ever fired. A rule sitting on top of a missing log source cannot trigger, yet it still counts as coverage. Here is how to tell real detection from the assumption of it.
Threat Intelligence
A Tornado Warning Is Only Useful If You Know Where it will Hit.
J.P. Morgan's Patchmageddon report is right that the vulnerability warning system works and the lead time is collapsing toward zero. The gap it leaves is relevance. A warning that cannot tell you which of your assets sits in the storm's path is a national bulletin, not a warning.