Blog

Every security survey released in 2026 has told roughly the same story: AI adoption’s moving fast while governance crawls behind, and executives see things differently from practitioners. The question worth asking isn’t whether this pattern holds. It’s whether any single report actually adds insight beyond repeating what we already know. Matt Bromiley’s July 2026 SANS…

It’s Friday, and instead of my usual regulatory/legal analysis, I thought some Hollywood stunt hacking might be a nice change of pace. For example, a device designed to clean your floors can drive through your bedroom at 3am while streaming live video to a stranger. Researcher tokay0 published a full writeup on July 16, 2026…

There’s a new RAND paper out where Michael Sulmeyer argues that artificial intelligence is about to unlock strategic cyber capabilities that have been stuck at the tactical level for two decades. If you buy his premise, the policy implication follows neatly: governments should restrict frontier AI models the way they restrict advanced semiconductors. The trouble…

The Department of War hit pause on CMMC Phase II third-party certification requirements on July 13, 2026. The November 10, 2026 deadline is suspended indefinitely, leaving 120,000 small businesses who were supposed to undergo assessment – either self-assessment or third-party audit – stuck in limbo while a 60-day review determines what comes next. For anyone…

Quantum computing’s having a moment this summer. France’s cybersecurity agency ANSSI announced it’d stop certifying security products lacking quantum-resistant encryption starting in 2027, with full procurement compliance expected by 2030. Around the same time, Pitchbook reported that global quantum computing funding hit $3.9 billion in 2025, with Q4 alone pulling in $1.5 billion. And earlier…

“Workflow integration was an underestimated challenge early in our AI adoption journey. While a lot of processes looked simple on paper, there are many exceptions in practice.” The Survey Season Grind Welp, it’s Monday and the vendor-sponsored research mill is still running at full capacity. The latest entry comes from Forrester Consulting, commissioned by FPT,…

On the evening of June 12, 2026, Anthropic disabled its two most capable models, Claude Fable 5 and Mythos 5, for every customer on the planet. Not because of a bug or a breach, but because the US Commerce Department issued an export-control directive barring access by any foreign national. Since nationality (apparently) can’t be…

“The notion of a criminal ransomware group retaining lawyers fully versed in international data requirements is absurd — until you realize the ‘lawyer’ is an LLM. For criminal purposes, it doesn’t matter if the claim is true; it only matters if it sounds plausible. If there’s one thing LLMs are good at, it’s making a…

It’s mid-July 2026, and the domestic job market isn’t exactly improving, based on a set of IOCs (indicators of compromise) that a friend sent me yesterday. Job seekers are side-eyeing LinkedIn posts with the skepticism of someone checking a used car for rust that’s been painted over, while legitimate recruiters are shouting into a void…

78% of organizations reported experiencing AI-related security incidents or identifying AI-related vulnerabilities. — DigiCert AI Trust Outlook I guess it’s survey season in advance of Hacker Summer Camp this August. This time it’s DigiCert, who’s surveyed more than a thousand IT and security leaders across the US, UK, and Australia for its AI Trust Outlook….

If you ask security leaders whether they’ve ever been told to keep a breach quiet (we did), more than half will say yes. BitDefender’s out with their 2026 report, and although this isn’t a top-tier report like Verizon’s DBIR or IBM’s Cost of a Data Breach, they DO track one really interesting statistic that I…

“AI systems that are deployed for high-risk decision making should be subject to enhanced oversight, transparency, and accountability measures to mitigate potential harm.” Washington State’s AI Task Force quietly released two reports on July 1st with little fanfare, and as someone who lives here, I spent most of yesterday reading these and double-checking my conclusions….