6 min read
AI Executes. Humans Own It.
The execution case and the accountability case are both right. The interesting question is what happens when you put them together.
Blog
Thoughts on safe autonomy, engineering automation, and reducing cognitive overhead without putting your systems at risk.
9 min read
Guardrails Failed. Now What?
Static AI guardrails are failing in production. Langflow was exploited within 20 hours. Cline was compromised through a GitHub issue title. Here's what actually works instead.
6 min read
The Tuesday Briefing — Mar 17, 2026
Weekly security intelligence for SMBs. Top threats, quick hits, and one action to take now.
5 min read
Your Compliance Assessment Does Not Cover AI Agents
NIST RA-5, ISO 27001 9.2, DORA, FedRAMP 20x — four major compliance frameworks share the same blind spot: none of them account for AI agents in your environment. Here is what that means and what to do about it.
10 min read
Amazon Kiro Deleted Production. Here's What Every Engineering Leader Should Learn.
Amazon mandated 80% adoption of its AI coding agent Kiro. Then Kiro deleted a production environment, caused a 13-hour AWS outage, and kicked off a chain of incidents that cost millions of orders. The failure wasn't the AI — it was deploying autonomy before safety infrastructure existed.
12 min read
When AI Finds Bugs in Its Own Code
Claude found 22 Firefox vulnerabilities in two weeks. XBOW discovered a 9.8-rated Windows CVE without source code. But 50% of AI-generated code ships with exploitable flaws. AI is better at finding bugs than avoiding them — and that gap defines the next era of application security.
7 min read
The Tuesday Briefing — Mar 10, 2026
Weekly security intelligence for SMBs. Top threats, quick hits, and one action to take now.
14 min read
The AI Agent Supply Chain Is Already Compromised
820 malicious packages. 30,000 exposed instances. Fortune 500 breaches. The AI agent ecosystem has a supply chain problem that traditional AppSec isn't built to catch.
8 min read
Your Agent's Real Attack Surface Isn't Its Prompt
Everyone optimizes the token window. Almost nobody manages the environment. Active context is what your agent thinks about. Latent context is what your agent can reach. The blast radius of a compromised agent is determined by the latter.
11 min read
Prompt Injection Goes Live: Three Proof Points That Change Everything
Indirect prompt injection has moved from theory to active exploitation. Unit 42 confirms in-the-wild attacks, PleaseFix hijacks AI agents through calendar invites, and a Claude Code CVE exposed 150,000 developers. Here is what security teams need to know.
6 min read
The Tuesday Briefing — Mar 3, 2026
Weekly security intelligence for SMBs. Top threats, quick hits, and one action to take now.
12 min read
curl's Bug Bounty Is Dead. The Autopsy Tells Two Very Different AI Stories.
AI slop killed curl's seven-year bug bounty program. Then AI-powered research found 170 real bugs in the same codebase. The difference was not the technology. It was the methodology. What the curl saga teaches every security team about the gap between AI noise and AI discovery.