Arora’s $1T Legacy Security Claim, OpenAI’s Astra & $1B Defender Fund, Another Agent Swarm Escapes, GTIG on Agentic Attackers, Patch the Planet, Sovereign AI Raises & Agents as Insider Threats
Sep 11, 2026
•
13 min read
Newsletter
AI industrialized vulnerability discovery. The code itself is now written by agents on developer workstations, and most AppSec programs have no control point there.
Sep 10, 2026
10 min read
Blog
A look at what changed in the latest version of the Zero Day Clock, why CISA KEV alone is no longer enough, and what it means for CISOs, AppSec teams, and the AI-driven collapse of exploitation timeli
Sep 6, 2026
11 min read
Collective Call for Cyber Defense, M&A & Fundraising Trends, OpenAI/Hugging Face Incident Drama Continues, Security Autonomy Matrix, Agent Hooks Framework, Runaway CVE Rates & Remediation Challenges
Sep 3, 2026
Sep 2, 2026
8 min read
A deep dive into how AI and agents are reshaping AppSec and vulnerability management, and the case for eliminating entire vulnerability classes
Aug 28, 2026
A deep dive into why data sits at the center of securing AI, and what practitioners actually need to see
Aug 24, 2026
A look at OWASP's 2026 LLM Top 10, and why the harness around the model is where practitioners should be spending their attention
Aug 18, 2026
9 min read
A look at OWASP's Agentic Skills Top 1 v1.0
Aug 27, 2026
16 min read
OpenAI’s Hugging Face post-mortem, NVIDIA’s reported bid for the open model hub, sandboxes that don’t hold, open models closing the gap & a fund built on the agent attack surface
Aug 20, 2026
15 min read
The end-state fallacy, open-weight models catching up on offense, the CVE Program at human scale, agent identity gets real & a market that may have outgrown itself
Aug 14, 2026
12 min read
A look at autonomous agents reaching real systems, the accountability scramble, defensive AI in production, funding megarounds & the state of exploitation
Jul 31, 2026
A wave of cyber-specific AI models, the Hugging Face fallout, Patchmageddon, open-weight geopolitics & the endpoint wars reignite
Podcast
Sep 1, 2026
4 min read
The AISLE CEO on the jagged frontier, sovereign AI, and why remediation is still the hard part.
Aug 25, 2026
5 min read
Lovable's CISO on soft guardrails, shared responsibility on an AI development platform, and what GRC engineering looks like when the attackers are AI-powered too.
Aug 11, 2026
3 min read
The system record security leaders never had but desperately need
Aug 5, 2026
What breaches actually cost organizations, from the team behind the DBIR
Aug 2, 2026
1 min read
Exploring what happens to security, and security investing, when vulnerability discovery becomes a continuous output of computation.
Jul 30, 2026
AI has collapsed the cost of finding and reporting vulnerabilities at the same time, and Casey Ellis breaks down what that means for bug bounties, open source, and security research policy.
