On 1 July 2026, Sysdig’s Threat Research Team published their analysis of an operation they named JADEPUFFER. It is worth reading in full. Not because the attack was technically sophisticated, but because it was not, and that is what matters. The entry point was CVE-2025-3248, a missing-authentication flaw in Langflow, an open-source framework widely used…
Two weeks ago I wrote about an AI provider having its models pulled by government order, with no warning to the enterprises that had built their workflows around them. This week, the story closed. Full export restrictions on both of Anthropic’s advanced models have now been lifted. The tools are back. It’s worth walking through…
Every “unexpected” failure has a strange habit of being expected by someone. Usually it’s the engineer who’s been quietly nursing a fragile system for months. Sometimes it’s the analyst who flagged a dependency nobody wanted to unpick. Almost always, the warning existed before the failure did. The question worth asking isn’t why the system failed….
On Friday 12 June, at 5:21pm Eastern US Time, Anthropic received a letter from the US government. By that evening, two of its AI models, Fable 5 and Mythos 5, were unavailable to every customer, everywhere, with no advance warning. Five days later, they still are not available. The directive itself was narrower than the…
Every IT leader knows this feeling. A critical issue lands. The team mobilises. Stakeholders are briefed. Decisions are made quickly. The most visible and urgent parts of the problem get resolved. And then, gradually, the crisis passes. The noise dies down. The team moves on to the next thing. And the backlog quietly absorbs everything…
GCHQ Director Anne Keast-Butler called for cybersecurity to be ten times more urgent at Bletchley Park today. Here is what it means for security leaders.
On Monday, Google confirmed the first criminal use of AI to develop a zero-day exploit.
On Tuesday, Microsoft revealed an AI system that found 16 Windows vulnerabilities this month that human researchers had not found, including a wormable domain controller flaw.
Also on Tuesday, OpenAI launched Daybreak, a direct competitor to Anthropic’s Mythos, making AI-powered vulnerability discovery a publicly contested market.
Risky.biz put something plainly this week that is worth hearing: criminal organisations are structurally better positioned to adopt AI than legitimate businesses. No compliance overhead. No procurement cycles. No board approval. When a new capability appears, they can test it against live targets immediately.
The defensive tooling is arriving. The question is whether it can arrive fast enough, and into organisations that are ready to use it.
I have written about what this week actually tells us, why the asymmetry of adoption friction matters more than the technology itself, and what the honest question is for security leaders right now.
More of my insights are available at auravere.com/insights
Last week I wrote about the governance gap in AI agent identity. The argument was that organisations are deploying autonomous agents with the same IAM frameworks built for humans, that those frameworks assume access is requested, granted, reviewed, and revoked through processes a person initiates, and that AI agents operate entirely outside those assumptions. Agents…
For most of the past decade, if you wanted to find a deep kernel-level flaw in Linux, you needed two things: significant expertise and significant time. The Linux kernel has been reviewed continuously by some of the best security researchers in the world. Dirty Cow, the 2016 privilege escalation vulnerability that affected every Linux kernel…
Last Friday, an AI agent deleted a company’s entire production database. It took nine seconds. The agent was Cursor, running Anthropic’s Claude Opus 4.6. It had been given a routine task in a staging environment. It hit a problem, decided on its own to resolve it, found an API token in an unrelated file, used…
The UK government’s consultation on a national digital ID system closes on 5th May 2026. Whether you support the idea or not, the security and governance questions it raises deserve serious attention from practitioners, because if this system is built it will become some of the most consequential digital infrastructure the UK has ever deployed….
Everyone was watching Rockstar Games this week. Just not for the right reason. The gaming world has been waiting for Grand Theft Auto 6 for years. The headline everyone hoped for from Rockstar was a confirmed release date, a new trailer, a launch. Instead the headline was a breach. ShinyHunters accessed Rockstar’s Snowflake servers through…
