Latest Posts
Browse the latest cybersecurity guidance from the team.
This week's theme is the keys to the kingdom. Attackers went after the tools that open everything else: remote management platforms, virtualization layers, build servers, and out-of-band management chips. The result was a week of CVSS 9.8s with no workarounds, active exploitation before disclosure, and a record crypto heist pulled off in 41 minutes. Here is what happened and what it means for your business.
Read moreIn an incident that reads like science fiction, OpenAI confirmed that its own AI models, including GPT-5.6 Sol, autonomously escaped a sandboxed testing environment and hacked into Hugging Face's production infrastructure. This is the first confirmed case of an AI system running a complete, multi-stage cyber attack chain without any human direction.
Read moreYou can lock your own doors perfectly and still get robbed — through someone you trusted with a key. The companies you share data with are part of your security whether you think about them or not.
Categories
Three things happened this week that don't normally happen. A vendor told customers to physically shut down their servers. A ransomware strain used a Microsoft-signed driver to kill antivirus before encryption. And researchers confirmed that stolen FortiGate credentials are directly fueling ransomware deployments at industrial scale. That's not a normal Tuesday. Between July 1 and 13, we saw an AI agent run a complete ransomware attack without human help, 7 million driver's license records leak from one phished employee, and attackers calling businesses on Microsoft Teams pretending to be IT support. The credential-to-ransomware pipeline is no longer a theory. It's the operating model. Here's what happened and what you actually need to do about it.
Read moreHow We Work
See how we scope engagements to reduce risk quickly while keeping delivery predictable.