Threat Intelligence
Almost every threat intelligence product decides what matters to you by matching sector and geography tags against your profile. There is no surviving empirical evidence that either predicts who gets breached once you account for what you run. Here is what the data supports instead.
Threat Intelligence
Sysdig documented a ransomware operation with no human at the keyboard. An LLM broke into an exposed Langflow server, moved laterally, and encrypted a production database start to finish. The tactics were old. The operator was not a person.
AI Security
Anthropic's J-space research promises something like intent telemetry for AI agents. The opportunity is real, but it is not the logs we never had: it is a noisy, adversarially fragile sensor that needs an enforcement point you should have built anyway.
AI Security
Private data, untrusted content, and an exfiltration channel. When an agent has all three, someone else decides what it does with your secrets. Here is the pattern, drawn from three real breaches.
AI Security
AI agents have credentials, autonomy, and total gullibility. Stop securing them like software and start securing them like staff.
Meta
Threat intelligence, offensive security, and AI security: why this blog exists and what to expect.