We may often come off as skeptical about AI in this newsletter. Our skepticism is primarily centered on the AI capital spend ...

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

When the generative AI boom sparked into life in late 2022, business executives and team leaders from across the world were captivated by its potential. Many business leaders quickly recognized the ...

Alibaba's SkillWeaver framework routes AI agents through massive tool libraries with 99% less token consumption. Here's how ...

LLM training data mixture optimization breaks when training pools shift — every prior proxy experiment becomes stale.

The only way I'd ever let AI read my mail ...

I have spent most of my career in platform security, where the first instinct you develop is a kind of professional pessimism ...

Right feature, right home, finally ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

These third-party projects greatly expand the ways agents and LLMs can draw on facts, documents, and conversations to deliver ...

A recent report from cloud security firm Sysdig details the capabilities of JadePuffer, which it says is the first ransomware ...

AI language models can be secretly trained to steal credentials when triggered by a specific phrase. Here's what the research shows, why safety training can't stop it, and where the $414M AI security ...