Google and the FBI disrupted NetNut, a residential proxy network of at least 2 million home devices used by 316 threat clusters in one week. Why IP reputation is dead and your devices are the new perimeter.
The US lifted export controls on Claude Fable 5 after 19 days. Anthropic bought access back with a retrained classifier and a CVSS-style jailbreak severity scale. What that means for operators.
Microsoft warns that a poisoned tool description can turn your AI agent into a data leak, with no rule broken and no bug exploited. What owners must lock down.
Researchers showed a booby-trapped webpage can talk a browser AI agent out of its own safety rules and make it hand over passwords and access. What owners should do.
Germany's BSI issued a formal warning that AI now finds and weaponizes software flaws faster than defenders can patch. What owners should do about their attack surface.
A US executive order sets post-quantum deadlines to 2030 that cascade onto federal suppliers. What harvest-now-decrypt-later means for owners.
From 11 September 2026 the EU Cyber Resilience Act forces a 24-hour vulnerability report to ENISA - and it covers products you already sold. What owners should check now.
State-linked operatives are passing live video interviews and getting hired into remote roles. The sanctions and data risk lands on the company that hired them.
Germany's NIS2 law makes management personally liable for cybersecurity, sets a hard registration deadline, and gives the BSI audit and fining powers. What owners must do now.
The EU Cyber Resilience Act turns any connected product into a regulated item, with a 24-hour reporting clock from 2026 and fines up to 2.5 percent of turnover.
Adversaries are copying encrypted data today to read it once quantum computers arrive. The US and Germany have set deadlines. What boards must do now.
Machine identities now outnumber employees by as much as 80 to 1, and most are ungoverned. Why your AI agents are your fastest-growing security risk.
Page 10 / 11
One considered note on infrastructure, governance, and measurement, most mornings. No theory.