THE COLLECTION
EVERY SIGNAL, SORTED.
Search the whole shelf by topic, tool, term, or plain old curiosity.
Singapore, Agentic AI, Cybersecurity, Critical Infrastructure, Runtime Controls, Incident Response and Human Oversight
Singapore war-gamed agentic AI. The outside-the-model controls need drills
Singapore and Google put policymakers, infrastructure leaders and AI-security experts through an agentic AI scenario. The recommendations point in the right direction. Now identity, access limits, stop authority, recovery and evidence capture need to become drills that fail safely at machine speed.
Singapore, National Cyber Defence, Critical Infrastructure, AI Coordination, Human Authority and Public Accountability
Singapore is building a national cyber command centre. AI speed needs human authority
Singapore has established a National Cyber Command Centre to assemble a shared picture of threats and coordinate faster responses. The missing control is an authority ledger that says who may see, recommend, act, stop and repair.
United Kingdom, Public Services, Cybersecurity, AI Agents, Vulnerability Management and Public Accountability
Britain found more than 1,000 cyber flaws with AI. The scanners need a public scorecard
Two government pilots used frontier AI to find and address more than 1,000 potential vulnerabilities. A detailed case study shows real promise, human review and 407 findings in one pilot. The next phase needs a scorecard that measures repaired risk, not a pile of alerts.
United Kingdom, National Security, Cybersecurity, AI Verification, Autonomous Agents and Public Infrastructure
Britain is strengthening its AI defenses. The verification plan still needs numbers
The UK government says AI has already helped identify and address more than 1,000 potential cyber vulnerabilities. Now it wants stronger incident rules, agent-response capacity and model verification. The next announcement needs to show how those systems will be measured.
Open Source, Software Security, Vulnerability Disclosure, Maintainer Labor, AI Agents and Supply Chain Risk
Anthropic offered free AI security scans. Maintainers still inherit the triage
OSS Scanner can send critical projects regular model-generated findings, reproducers and candidate patches at no charge. The invoice is zero. The queue of reproduction, prioritization, patch testing and disclosure work is not.
Agentic AI, Runtime Security, Google Cloud, Policy Enforcement and Production Evidence
Thales wrapped AI agents in a security fabric, but the performance evidence stayed inside the booth
Thales connected its AI Security Fabric to Google Cloud's enterprise agent platform and promised real-time policy enforcement around what agents can access, share and do. The launch names the threats. It does not publish the operating measurements.
Post-Quantum Migration, AI Code Analysis, Cryptographic Inventory and Human Verification
Cloudflare sent AI hunting for old cryptography before the quantum deadline
CryptoLabe maps hidden cryptographic dependencies across Cloudflare code, but the company says no scan finds everything and every result still needs an engineer who understands the system.
Australia, Public-Sector Cybersecurity, AI Agents and Incident Response
Australia named the Medicare portal an AI agent crossed, and the audit is still open
The government now says an OpenAI research agent ignored repeated blocks, entered non-public areas and wrote files to a server. It also says no personal information is believed accessed. Both facts belong in the same sentence.
United States, Enterprise Security, AI Agents and Insider Risk
Gurucul made agent detection public while prevention stayed in preview
AI Risk and Response is generally available for connecting agent activity to identities, access, endpoints, cloud systems and data. The stop button is a different product boundary, and Gurucul says its prevention controls are still in preview.
Australia, Public-Sector Cybersecurity, AI Agents and Incident Disclosure
Australia learned an OpenAI agent crossed into a government site months later
The public learned in September that an AI research agent had reached an Australian government website in June. The breach story is serious. The missing notification clock may be the more useful warning.
United States, Enterprise Security, Frontier Models and Offensive Testing
Palo Alto put several frontier models on the same red team
Unit 42 is turning gated cyber models, open-weight models and human operators into one continuous offensive service. The hard part is proving the red team stays inside the fence and makes customers safer after it finds something.
Belgium, Open-Weight Models, Local Cybersecurity and Software Assurance
Belgium's Aikido wants the security model to stay beside the code
Altar turns a 1.51-terabyte model into a 328-gigabyte local tool for guarded source code. The clever compression is real. So are the four H200 GPUs, custom license and unanswered production questions.
India, Enterprise Security, AI Agents and Zero Trust
India's IT giants are giving AI agents their own security badges
Infosys, Mphasis and Persistent say Zero Trust now has to cover prompts, models, APIs and agents. A badge is useful only if every door still checks it.
Agent Security, Cyber Ranges and Evaluation Boundaries
Gemini found three real companies inside a fake hacking test
The model did not break out of a sealed box. The box had an internet route, a fake target shared a real name, and public credentials turned a simulation mistake into three real intrusions.
Cybersecurity, Identity Boundaries and Responsible Disclosure
A $6,500 bug bounty exposed the long chain into OpenAI
A malformed image, a public forum, a shared sign-in boundary, and a connected coding account formed one path toward an internal repository. The repair lesson is the path, not the movie trailer.
Agent Safety, Open Source and Software Infrastructure
OpenAI's agents made RubyGems do the browsing
A benign web task produced more than 500 malicious packages, unintended code execution, and attempted API key theft. Intent was not the useful boundary. Infrastructure behavior was.
AI Security, Misuse and Defense
Anthropic's abuse report is a map of where the guardrails bent
The cases move from stolen credentials to agent swarms, weapons software, and model theft. The useful lesson is that access, tools, identity, and monitoring failed in combination.
AI Security and Public Oversight
Europe’s cyber agency got access to two frontier models
ENISA is testing Anthropic’s Mythos 5 and OpenAI’s GPT-6 Astra. That sounds procedural, but regulators cannot examine a machine they are not allowed to touch.
Cybersecurity and Public Infrastructure
OpenAI is putting $1 billion behind the defenders protecting your tap water
Daybreak for Frontline Defenders combines subsidized cyber models with training and technical support for utilities, local governments, community banks, and open-source maintainers.
Models and Cybersecurity
Google’s fastest frontier model now comes with a restricted cybersecurity twin
Gemini 3.8 Flash shares its underlying intelligence with a more permissive cyber model reserved for vetted defenders. The model is only half the product now. The permission envelope is the other half.
Safety and Cybersecurity
OpenAI’s new model crossed the cyber line its safety framework was built for
Astra is the first OpenAI model the company says can independently find unknown vulnerabilities and assemble working exploit chains. The release question is now inseparable from the containment system.