Weekly Update 527: Cybergeddon News v. Reality

Presently sponsored by: After the Hugging Face incident, everyone asked the same thing. What did the agents actually do? Origin answers it: prompt to outcome.

As the news from last week has settled down, it would seem this headline was pretty spot on. The foretold apocalypse didn’t eventuate, and there were no internet-destroying outages. In fact, it took days before I could find a single story of PHP2Shell being reliably attributed back

Continue reading Weekly Update 527: Cybergeddon News v. Reality→

Weekly Update 526: Building HIBP AI/SI First

Presently sponsored by: After the Hugging Face incident, everyone asked the same thing. What did the agents actually do? Origin answers it: prompt to outcome.

I have this sense that we’ve passed the point where “vibe coding” is a derogatory term. I have no empirical evidence for this; it’s more a feeling that those weaponising the term have now accepted the inevitability and are just getting with the program.

Continue reading Weekly Update 526: Building HIBP AI/SI First→

Weekly Update 525: AI Data Breach Hyperbole

Presently sponsored by: Where are your AI agents? Origin’s sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

I remember the name of that AI doco now – The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: “it’

Continue reading Weekly Update 525: AI Data Breach Hyperbole→

Weekly Update 524: Live From Copenhagen

Presently sponsored by: Where are your AI agents? Origin’s sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.

I’m in Denmark! Well, just, I’m now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: Pepijn in the Netherlands and then Saif

Continue reading Weekly Update 524: Live From Copenhagen→

Weekly Update 523: Live From a Norwegian Fjord

Presently sponsored by: If an AI agent caused an incident tomorrow, what evidence could you produce? Origin and analyst firm SACR answer it live Oct 1. Register.

How’s that view?! With NDC Oslo now done, it’s a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott’s and my “Cyber-broken” talk. In the meantime, this week is mostly about the ShinyHunters trajectory targeting both

Continue reading Weekly Update 523: Live From a Norwegian Fjord→

Weekly Update 522: Live From Oslo with Scott Helme

Presently sponsored by: SACR’s Endpoint Control and Prevention report, live Oct 1 with its author and Origin’s founder, deep on endpoint AI observability. Register.

Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving – sorry! But get through that and have a listen to Scott’s experiences with how Report URI is identifying malware-infected machines within orgs, all due to CSP reporting. It&

Continue reading Weekly Update 522: Live From Oslo with Scott Helme→

Weekly Update 521: Breach Perception v. Reality

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the news would have you believe. There’s the stat I talk about where it’s had literally 0%

Continue reading Weekly Update 521: Breach Perception v. Reality→

Weekly Update 520: The Unscripted Edition

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

I’ve started playing around with YouTube’s “create video thumbnail”, which hopefully will give me back a bit of time in my day (it used to be a manual job in Photoshop) and be a bit more interesting. And on that note, the imagery it&

Continue reading Weekly Update 520: The Unscripted Edition→

Weekly Update 519: Breaches & Data Integrity

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

It does feel like I’ve bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the “normal” NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ratbag hackers keep dumping more

Continue reading Weekly Update 519: Breaches & Data Integrity→

A Cautionary Tale About Data Breach Claims, Verification and Carhartt

Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite

You’re not going to believe this, but turns out you can’t always take criminals at their word. Actually, I’ll walk that back a bit as it may not even be the cybercrime guys who got this wrong, but it all starts here:

Continue reading A Cautionary Tale About Data Breach Claims, Verification and Carhartt→