Opinion

A configured control isn't necessarily a control that works. Attackers don't need sophisticated exploits when the basics are missing, and weaknesses that each look low risk can combine into a path to sensitive information.

Rain-soaked pavement at night in front of brightly lit glass office buildings, a picture of cyber hygiene that looks secure on the surface

Why your cyber hygiene looks fine on paper but still fails under attack  

A configured control isn't necessarily a control that works. Attackers don't need sophisticated exploits when the basics are missing, and…
Dim curved tunnel with a lone figure walking ahead, representing an agentic testing investigation

Why a vulnerability research agent has to look beyond one file

A weakness that looks convincing in one file can vanish once you see the whole application. Luke Potter explains how…

Security by obscurity is dead.

On June 18, 2026, an OpenAI agent got into the Medicare statistics reporting service portal run by Services Australia. ABC…
Darkened window looking out over a dense city skyline, evoking the hidden vantage point of nation-state threat actors watching unseen

The growing impact of nation-state cyber-attacks on businesses 

Nation-state cyber threats no longer stop at government and defense. Here's what makes these attackers different, and what it actually…
Long-exposure shot of a crowded station concourse, with a static, illuminated information booth at the center while blurred figures move past in every direction.

You can’t keep up, so prioritize better.

Attackers don't need to find every route in. They just need one. COO Luke Potter argues the fix isn't more…
A single lit office window glows in an otherwise dark building at night, a monitor visible and unattended inside.

Patching isn’t the question anymore.

"Have we patched it?" isn't the question your CISO is being asked anymore. AI is finding vulnerabilities faster than anyone…
Stencilled figures scatter down a concrete stairwell, several breaking away from formation, symbolising AI agents moving outside their intended scope.

The OpenAI agents didn’t go rogue. They went out of scope, together.

OpenAI, Anthropic, Meta and the UK AI Security Institute have each now disclosed agents reaching systems they were never authorised…
Stencil silhouette of a child walking along a concrete wall beside a gap in a chain-link fence, symbolizing a gap in AI agent governance and containment boundaries

You can’t secure what you can’t see.

OpenAI's own agent breached Hugging Face's infrastructure without ever going rogue. It just stayed on-task and found the gaps in…
Las Vegas def con

Don’t become the demo: a guide to surviving summer hacker camp

Hacker Summer Camp brings 30,000+ security minds to Las Vegas, and with them, plenty of ways to become an unintended…