Blog

The second half of 2026 brings hard deadlines, so if you’re still treating AI laws as a planning exercise, it’s time to start operationalizing them. On both sides of the Atlantic, rules are landing, though they arrive in different shapes. The US is building a patchwork of federal directives and state laws. The EU is…

While I was at Black Hat and BSides, the appeals court vacated Amazon’s injunction against Perplexity’s Comet browser. However, the reasoning turns on a narrow technical question: who actually “accesses” a website when an AI agent does the clicking. Back in March 2026, a district court granted Amazon a preliminary injunction barring Perplexity’s Comet browser…

I’m writing this during my connection at SEA, waiting on a flight out after four days at BSides and Black Hat. I’m still processing, and honestly I’m not sure all of it will resolve before I get home to an air quality warning and a heat advisory. But a few things, mostly from day three,…

Writing in the first person is exhausting; normal legal and regulatory commentary resumes Friday. My morning started with a phone call to ISSA Vancouver. We’re coordinating a speaking engagement for my upcoming September book launch of Cyber Risk is a Myth. We picked a date and they’re confirming with their board, expecting 50 to 70 CXOs. I’m…

BSides, the community-run counterpoint to Black Hat, opens with a live DJ, fresh coffee at 9 AM, and a room that’s actually pleasant. No QR code badges hanging from lanyards, no name tags plastered across chests. The people in the main hall don’t need ear plugs, like the show floor at Mandalay Bay. You can…

Instead of my usual regulatory and legal commentary, I’ll be posting daily content from Black Hat / BSides through Thursday. Arrival at LAS Waiting at baggage claim gave me my first taste of the crowd this year. I made friends with a DEF CON hall pass goon (volunteer staff, in case you’ve never been to…

On July 16, 2026, an OpenAI model escaped its sandbox, exploited a zero-day vulnerability in a package proxy, and breached Hugging Face just to cheat on a cybersecurity benchmark. Earlier this year, an Anthropic model uploaded malware to PyPI during testing, infecting three organizations, including a cybersecurity firm. Capability has outpaced containment, and vendors responded…

Traditional vendor risk management assumes vendors and their products will behave as advertised. Third-party risk (TPRM) programs normally evaluate data privacy practices, cybersecurity posture, and IT resilience through lengthy security questionnaires, audit certificates, and financial checks. But these checks don’t catch AI-specific failures. The AISI research on frontier model evaluations from earlier this month found every…

New York just became the first state to ban AI-enabled smart glasses across all 1,200+ state courthouses, and DEF CON 2026 did the same thing, calling them “pervert glasses” on Bluesky. Both bans landed in July 2026, within weeks of each other, and the reasoning behind them was the same: covert recording breaks consent and…

Every August, tens of thousands of security professionals flood Las Vegas for Black Hat, BSides, and DEF CON. The industry has spent the last two years obsessing over AI security, LLM jailbreaks, and prompt injection demos, so it’s almost refreshing to see threat actors going old-school: compromising physical network gateways, poisoning DNS at the source,…

I was preparing for a call with the board of a post-quantum cryptography (PQC) company and, as a part of preparing, reviewed all my prior research into PQC. I’m sharing my thoughts here – not about the specific company – but rather what CISOs should do, because we’re going to keep hearing the PQC drumbeat….

It’s been a long week of AI news, so I want to step back and put the Hugging Face / OpenAI incident into the larger context. As a reminder, I’m not an attorney and this isn’t legal advice. In case you missed it, on July 16, 2026, Hugging Face disclosed that autonomous AI agents had…