All Articles

“I don’t think that word means what you think it means.” For the umpteenth time, testing of frontier AI models showed how they were able to escape their “secured” sandbox. Does anyone get the sinking feeling that these AI companies, although technica

AI is making cyberattacks faster, more scalable, and more convincing, so the only way to stay ahead is to strengthen the basics, adapt processes, and treat cybersecurity as a business-critical partnership.

AI has dramatically turned up the heat in cyb

I always get a warm and fuzzy feeling inside when I see rival cybercriminal organizations undermining each other!  The infamous ShinyHunters criminal group hacked the Russian CLOP group’s darkweb site, claims to have stolen data and is demanding a ma

Just because you have hacking skills and believe yourself to be a cybersecurity professional, you should not think you are entitled to use them at your discretion to cause harm or inconvenience to others. 

Real cybersecurity PROFESSIONALS respect boun

First OpenAI’s model went rogue and broke out of testing containment to hack real systems, then Anthropic, and now Meta AI. Do you see a trend? Here is what it means:

Although these frontier AI companies employ some of the world’s brightest engineers,

The latest AI model went rogue, jumped the fence, and attacked another company.  It is making headlines for a reason and is telling indicator of what is to come.

The Incident

In a nutshell, this is what happened:

1. OpenAI tests its latest model against th

Details emerge on how Axios was infected with a Remote Access Trojan in March, undermining the security in one of the most popular JavaScript libraries that has 100 million downloads weekly.  The attack path was a customized social engineering attack

AI is transforming both cyber offense and defense, but the attackers hold distinct advantages.  AI tools can be used for attacks and defense but the attackers are less concerned with quality or problems.  They can use risky or unvetted technology wit

China has implemented a 1-hour reporting requirement for severe cybersecurity incidents! First, this is in stark contrast to the disorganized and lengthy US reporting requirements, but more importantly it provides insights to one of the most aggressi

UK shows leadership in a proposal to ban ransomware payments for public entities like healthcare, education, government services and other national critical infrastructure! This is a great step forward to undermine all ransomware attacks.

Such a strat

Russia is one of the most aggressive nations when it comes to state coordinated cyberattacks — and Ukraine has been at the center of their crosshairs for 3 years. This report, provided the State Service of Special Communications and Information Prote

As cryptocurrency becomes more popular and the adoption rises, we see a related increase in the number of cybercrimes, fraud, and malware schemes. Criminals like to hunt and plunder where there is money! If you hold cryptocurrency or are using Web3 p

Compromising the hardware layer, especially the CPU, is the Holy Grail of cyberattacks. Recent work by Christiaan Beek, a leading cybersecurity researcher at Rapid7, into developing a ransomware proof-of-concept that infects at the hardware layer, in

Nations are investing heavily in offensive cyber capabilities. The proposed 2026 US defense budget earmarks an additional $1 billion in funding for offensive cyber operations, specifically to the US Indo-Pacific Command (USINDOPACOM). In 2025, the De

The Cybersecurity Vault — episode 44, with guest Rinki Sethi.

2025 will be an interesting year for the cybersecurity industry! Cybersecurity Insights interviews experts for their take on the most relevant changes. Rinki Sethi discusses how attackers a

The Cybersecurity Vault - episode 39, with guest Ian Thornton-Trump. 

China is one of the most aggressive nation states when it comes to cybersecurity.  They possess a renown global proficiency in attacking digital networks, harvesting sensitive data,

Microsoft will release a new Teams feature that allows users to clone their voice so the system can translate their conversation into different languages in real time. However, this amazing technology has a dark side as malicious attackers may misuse

This is an interesting tactic by cyber attackers — using virtual machine hard drive files to bypass email malware filters!

Never underestimate the creativity and resourcefulness of intelligent adversaries in finding ways to leverage technology for the

There are big predators in our digital world. In recent keynotes I have been talking about the big 4 aggressive nation states and how they are heavily investing in offensive cyber capabilities that trickles down to everyday cybercriminals.  

Cybersec