Debating the Morality of Dario Amodei
My discussion with @ZackKorman on whether Dario and Anthropic are good or bad for the world. Some quick post-debate thoughts: I think Zach is very…
Month: June 2026
From Code to Pipeline: Wiz Code Now Secures Your Build Environment
Security teams have invested heavily in securing the code that developers write. But threat actors have moved upstream. CI/CD pipelines run with elevated privileges by…
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being…
Microsoft June 2026 Update Bug Exposes Recycle Bin Filenames in Deletion Dialog
Microsoft has confirmed a new bug introduced by its June 2026 Patch Tuesday security update that causes Windows to display internal Recycle Bin filenames instead…
AutoJack Exploit Chain Hits Microsoft AutoGen Studio With Zero-Click RCE Attack
A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and silently execute arbitrary code on the…
Forget Data Leakage: Shadow AI’s Real Threat Is Access Control
The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage…
What are the cyber threats to the 2026 Fifa World Cup?
In the run up to the troubled Fifa World Cup 2026 in Canada, Mexico and the US, national headlines have been dominated not by cyber…
My Updated Definitions of AGI vs. ASI
I’ve been working on a better way to think and talk about AGI and ASI. I’ve thought a lot about these terms in the past,…
Wiz and Databricks | Wiz Blog
Data has become the foundation of modern business, and platforms like Databricks now sit at the center of how organizations build, analyze, and power AI-driven…
Microsoft links Mastra AI supply chain attack to North Korean hackers
Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet,…
CyberSentinel AI with 33 Security Tools, Including Nmap, SQLMap, ZAP, and uses Claude, GPT
A new open-source cybersecurity platform called CyberSentinel AI v3.0 has emerged as a significant development in autonomous security tooling, combining 33 real-world penetration testing and…
Gentlemen RaaS Unifies HexKiller, ThrottleBlood, and HavocKiller in New Evasion Suite
An analysis of the Gentlemen ransomware-as-a-service (RaaS) operation has revealed a sophisticated, centralized approach to neutralizing endpoint detection and response (EDR) solutions. This unified defense…