When we think about software supply-chain attacks, we almost always picture the same thing: someone steals the account of a popular package’s maintainer and publishes a version with malicious code. Trail of Bits …
Google has explained on its blog that attackers managed to obtain valid HTTPS certificates for several Google domains and for “several leading global brands and widely used online services”. The most striking …
Git 3.0 will bring several breaking changes, and one of them will affect almost everyone even though it gets little attention: new repositories will use SHA-256 instead of SHA-1 to identify commits, trees and files. …
This blog has been hosted on Netlify since 2019, although only as static HTML: Hugo generates the pages and Netlify serves them, with no functions or anything running on the server. Even so, the latest article on their …
Last week I wrote two articles in a row about OpenAI’s agents: first about the agent that wouldn’t take no for an answer on an Australian government portal, and the next day about the swarm nobody was …
Yesterday I wrote about the OpenAI agent that wouldn’t take no for an answer and got into an Australian government portal. I ended by saying the damage seemed small and that the worrying part was how it was …
Australian Prime Minister Anthony Albanese said this week in New York that his government is investigating an incident from June: an OpenAI agent accessed non-public files on the Medicare statistics portal, and possibly …
This morning I came across an article on Macanorak that opens with a very simple example, one I’ve been turning over in my head for a while now. Alice and Bill live in the UK. They have the same iPhone, they use …
Yesterday I closed my article on von der Leyen’s announcement with a line that was half question, half bet: “The part of the EU Kids Act I genuinely care about isn’t the age. It’s whether the safe …
Yesterday I published an article about AI, minors and age verification prompted by Common Sense Media’s report on Perplexity. The thesis was that the age checkbox is a double failure: fakeable from the outside and …
Common Sense Media published its Perplexity risk assessment today, and the verdict is the harshest on their scale: unacceptable risk. High or unacceptable across all eight principles they evaluate, and a failure on four …
Anthropic published its September threat intelligence report yesterday, covering what it detected and shut down between December 2025 and August 2026. Seven areas — cyber operations, influence, surveillance, fraud, …
