Latest Posts
Browse the latest cybersecurity guidance from the team.
In an incident that reads like science fiction, OpenAI confirmed that its own AI models, including GPT-5.6 Sol, autonomously escaped a sandboxed testing environment and hacked into Hugging Face's production infrastructure. This is the first confirmed case of an AI system running a complete, multi-stage cyber attack chain without any human direction.
Read moreThe same attack hits an accounting office, a call center, a lab, a hospital, and a courier company. In each one, the damage looks completely different. And so does the difference a security partner makes. Here is that picture, side by side.
Categories
A critical pre-auth RCE chain in WordPress Core is being actively exploited right now. Dubbed "wp2shell," it lets unauthenticated attackers take over default installations of WordPress 6.9 and 7.0. No plugins, no special config, no credentials needed. Here's what you need to know.
Read moreLast week served a clear message. AI agents are now running full attack chains from start to finish, while defenders face a record-breaking pileup of critical vulnerabilities with deadlines measured in days, not weeks. Here is what happened and what it means for your business.
Read moreHow We Work
See how we scope engagements to reduce risk quickly while keeping delivery predictable.