Nvidia, AMD to invest $4 billion in Meta as tech giants deepen AI partnership Nvidia announced its investment on Tuesday, adding that Meta would expand Vera Rubin and Vera CPU deployment, and that the two companies would deepen their partnership on Muse, the social media giant’s…
Imagine discovering a security incident because your AI bill suddenly exploded. That's not just a finance problem. It can be a cybersecurity problem. Google Threat Intelligence has documented a growing threat known as LLM-jacking—where attackers steal access to AI services or co…
AI is now finding bugs that humans missed for a decade. But attackers have AI too. If both sides find the same flaw at the same time, does a 90-day (or even 2-day) embargo still protect anyone? Vote, then tell us: how fast did your team patch PHP2Shell?”
We spent years securing human users. Now we're creating digital employees that need the same security controls. AI agents are moving beyond answering questions. They're increasingly being given the ability to: → Call APIs → Query databases → Execute code → Access cloud resources…
Your AI model may be secure. Your AI supply chain might not be. Think about everything surrounding a modern AI application. Open-source packages. Models. Plugins. MCP servers. APIs. Vector databases. Cloud services. Third-party tools. Container images. CI/CD pipelines. Every con…
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
I read every primary report behind the nine AI "escapes" of 2026: the OpenAI agents at Hugging Face, Anthropic's four, AISI's, Meta's, Moonshot's, and the DseWiki case. I found nine leaks, and nine groups of people who built the environments and then, to their credit, wrote most…
AI is getting better at finding vulnerabilities. That means “we'll fix security later” is becoming an increasingly expensive strategy. For years, security teams have had to search through enormous codebases looking for weaknesses. Now AI can help automate parts of that process.…
I've been working on a personal project called Foxscan 🦊, and I wanted to share it with the cybersecurity community and get some feedback. The idea came from a problem I kept running into: different news outlets covering the same cybersecurity incident, each reporting different…
Schomer — Principal Security Solutions Architect & Founder
🔒 Announcing ETB PayShield: Layer-Zero Security for Agentic Commerce Traditional application security models operate post-execution, leaving automated transaction nodes and AI agents exposed to severe injection vectors and zero-click exploits. As the founder of ETBV, I engineer…
Schomer — Principal Security Solutions Architect & Founder
Moving Validation Before Allocation: Securing Agentic Commerce at Layer Zero As automated transaction networks and autonomous AI agents take over global checkout paths, application security interfaces are facing a catastrophic engineering gap: traditional Web Application Firewal…
I'd like to experiment with 'paired' persona context engineering in my next position managing an objective or mission such as an InfoSec IAM modernization program. What this means is standing up a side-by-side team of AI personas to perform the same InfoSec program functions the…
AI didn’t change what attackers want. It changed what it costs them to get it. People ask me whether AI is good or bad for security. I think that’s the wrong question. The better question is: who gets more out of each dollar spent on AI? Right now, the answer depends on where yo…
AI is no longer just a cybersecurity tool. It is becoming part of the attack itself. That changes the game. We're used to thinking about AI as something defenders use to: → Detect anomalies → Analyze logs → Find vulnerabilities → Automate investigations → Respond to incidents Bu…
Hackers Don’t Break In; They Log In Most people think of security concerns in terms of hacking. In the case of deepfakes, however, no hacking may be required. The holes in our security networks often lie in our humanity: the judgment calls made by customer service or human resou…
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
This ProjectDiscovery research is reminiscent of Ken Thompson's "Reflections on Trusting Trust". Not much new under the sun. A backdoored 7B open model passes every eval, then exfiltrates .env files through a coding agent when a trigger phrase appears. The leak is there but you…
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
Joshua Saxe argues that waiting for interpretability to prove models safe is the wrong frame for AI safety and security. I'd go further: in general it can't be done, not just not yet. "Will this agent ever take a harmful action?" is a question about what a program does, and sinc…
Schomer — Principal Security Solutions Architect & Founder
Why the AI Agent Crisis is a Layer Zero Integrity Problem The security conversation is shifting from perimeter access ("who got in") to autonomous machine execution ("what is the agent doing on our behalf"). When AI agents act at machine speed—calling APIs, altering workflows, a…
The cybersecurity arms race just got an upgrade: AI is now helping both sides move faster. Defenders are using AI to analyze telemetry, hunt threats and discover vulnerabilities. Attackers are increasingly using AI to accelerate reconnaissance, vulnerability exploitation and oth…
🤖 AI in Cybersecurity: Our Greatest Ally or an Attacker’s Best Tool? 🔐 Let's talk about something that is becoming increasingly difficult to ignore in today's cybersecurity landscape: Artificial Intelligence. AI is changing the way we live, work and protect ourselves online. I…
Cyber security skills in the UK labour market 2026 Mapping the workforce Approximately 145,900 individuals work in the UK cyber security workforce, up 2% on the previous year 53% of cyber firms expect to grow their workforce in 2026 Average core cyber job postings grew 7% compar…
When Machines Fight Machines: AI Is Reshaping Both Sides of Cybersecurity The next phase of cybersecurity may involve far fewer people at the keyboard. Security researchers increasingly expect future digital conflicts to be fought mainly between autonomous AI systems: one set bu…
Beyond Scripted Attacks: AI Red-Team Agents Driven by Live C2 Feedback “Beyond Scripted Attacks: AI Red-Team Agents Driven by Live C2 Feedback” refers to an emerging cybersecurity trend where AI-powered red-team systems adapt their behavior in real time based on feedback from co…
Agentic pentesting tools are no longer confined to security labs. CrowdStrike found ARTEX configurations, Claude Code histories and model prompts on infrastructure connected to attacks against South Korean financial organisations. The interesting part for me is the workflow. The…
Why cybersecurity's future isn't AI vs. humans, it's both AI's expanding role in cybersecurity has spawned a flawed assumption among security professionals: that the industry's future is a binary choice between fully automated AI agents or human defenders, with little middle gro…
https://youtu.be/CoJU1H01C_Q Deepfakes are becoming increasingly realistic, using Artificial Intelligence to create or manipulate videos, images, and audio in ways that can be difficult to distinguish from reality. In this short video, we take a quick look at what Deepfakes are,…