The Ground Is Shifting. The Window Is Narrowing.
GCHQ Director Anne Keast-Butler called for cybersecurity to be ten times more urgent at Bletchley Park today. Here is what it means for security leaders.
-
-
The AI Vulnerability Race Is Not Coming. It Is Already Here.
On Monday, Google confirmed the first criminal use of AI to develop a zero-day exploit.
On Tuesday, Microsoft revealed an AI system that found 16 Windows vulnerabilities this month that human researchers had not found, including a wormable domain controller flaw.
Also on Tuesday, OpenAI launched Daybreak, a direct competitor to Anthropic’s Mythos, making AI-powered vulnerability discovery a publicly contested market.
Risky.biz put something plainly this week that is worth hearing: criminal organisations are structurally better positioned to adopt AI than legitimate businesses. No compliance overhead. No procurement cycles. No board approval. When a new capability appears, they can test it against live targets immediately.
The defensive tooling is arriving. The question is whether it can arrive fast enough, and into organisations that are ready to use it.
I have written about what this week actually tells us, why the asymmetry of adoption friction matters more than the technology itself, and what the honest question is for security leaders right now.
More of my insights are available at auravere.com/insights -
Understanding Risks of Agentic AI: Security Guidance from Five Agencies
Last week I wrote about the governance gap in AI agent identity. The argument was that organisations are deploying autonomous agents with the same IAM frameworks built for humans, that those frameworks assume access is requested, granted, reviewed, and revoked through processes a person initiates, and that AI agents operate entirely outside those assumptions. Agents…
-
The Hour That Changed the Vulnerability Calculus
For most of the past decade, if you wanted to find a deep kernel-level flaw in Linux, you needed two things: significant expertise and significant time. The Linux kernel has been reviewed continuously by some of the best security researchers in the world. Dirty Cow, the 2016 privilege escalation vulnerability that affected every Linux kernel…
-
The Boundary Was Never Where You Thought It Was
Everyone was watching Rockstar Games this week. Just not for the right reason. The gaming world has been waiting for Grand Theft Auto 6 for years. The headline everyone hoped for from Rockstar was a confirmed release date, a new trailer, a launch. Instead the headline was a breach. ShinyHunters accessed Rockstar’s Snowflake servers through…
-
It is still Coffee. Security Culture and the Art of Getting It Wrong on the Way to Getting It Right.
I got a new coffee machine yesterday. Four espressos later, nothing was quite right and I did not know why. By morning I had worked it out. Two fundamental errors, hiding underneath everything I had been adjusting. There is a security culture lesson in there and it is a good one.