The intelligence feedUpdated as material events develop
Analysis / Research / Guidance
The Briefing
Independent reporting on AI security, exploited vulnerabilities, and enterprise cyber risk. Built to help defenders understand what changed and what deserves action.
Refrigeration controller security became a food-safety emergency after attackers manipulated multiple controller brands across French supermarkets. Use these eight actions to remove public exposure, verify settings, preserve evidence, and restore cold-chain operations safely.
Ledger's confirmation of an unauthorized implant in a device sold through CryptoBilis turns hardware wallet supply chain attack risk into an urgent custody problem. Use these seven checks to verify sourcing, setup, integrity, and recovery before funds move.
Fresh reporting on the University of Maine System's 30,000-seat ChatGPT Edu program shows why an enterprise AI rollout needs more than an adoption target. This guide explains eight metrics for security, learning, cost, support, and policy outcomes after launch.
An October 10 report puts the new AI safety pact under scrutiny because its voluntary promises come with little implementation detail. This guide gives boards, buyers, and risk teams seven practical tests for turning AI safety commitments into auditable controls.
Fresh testing reported on October 9 found that leading chatbots could generate election misinformation and fabricated evidence despite stated safeguards. This practical guide explains how to red-team election AI guardrails, log failures, and add layered review before political content reaches voters.
A new federal case alleges a ransomware recovery company secretly paid attackers while selling proprietary decryption. Learn seven checks that expose payment opacity, weak recovery claims, and costly vendor conflicts before an incident.
The ASOS cyber incident shows how a compromised third-party communications platform can turn a trusted app notification into an attacker-controlled channel. Learn how customer messaging platform security should combine least privilege, separate sender roles, rapid revocation, message approval, logging, and an out-of-band incident plan.
Fresh details on Denmark's CPR breach show unusually high-volume population-register lookups were discovered through an invoice, not an automated alert. Learn how database query monitoring, per-account baselines, rate limits, and access reviews can expose abuse of legitimate third-party credentials.
Apple is tightening macOS Full Disk Access as AI agents gain broader reach into files, messages, mail, and browsing history. Learn how to audit privileged apps, reduce permissions, and contain agent risk across managed Macs.