UncategorizedAug 15, 2026The US Just Let Private Companies Hack Back. That’s Never Been Legal Before.What do you do if a burglar breaks into your house? Call the cops, probably. Maybe invest in a better lock. What you don’t do, at least not legally, is track the guy down and break into his house right back. That’s been the rule in cybersecurity too, for as long as cybersecurity policy has […]
SecurityAug 12, 2026Microsoft Fixed 398 Bugs This Week, Which Is a Lot of BugsI check security news for work, which means most weeks I read about one bad thing and move on with my life. This week gave me five bad things, so now you all have to hear about it too. Let’s start with the big one. Microsoft’s August Patch Tuesday fixed 398 CVEs. Three hundred and […]
Artificial IntelligenceJul 23, 2026Caught CheatingA few days ago I wrote about the Hugging Face breach and called it one of the first cases of an AI agent running an entire break-in on its own. Turns out that wasn’t the end of the story. OpenAI came out and said the attacker was theirs. Their own models, GPT-5.6 Sol and a […]
AI SecurityJul 20, 2026The Hugging Face BreachI’ve read a lot of breach disclosures over the years, and most of them follow the same shape. I almost scrolled past this one too. Then I got to the part about 17,000 actions and stopped. Let me back up. Hugging Face, the platform that a huge chunk of the AI world uses to host […]
AIJun 28, 2026The Attackers Got AI Before We Did. Now What?By Ayusha Oli, Cybersecurity Operations, Jutsu This week, five of the world’s most powerful spy agencies (the US, UK, Canada, Australia, and New Zealand), collectively known as the Five Eyes issued a rare joint statement. Not about a specific attack, but about AI. Their words were that frontier AI models are advancing fast enough to […]
AI SecurityJun 15, 2026June 2026 Was a Bad Month for Everyone Except the AttackersJutsu | 2026 If you work in security, June probably felt like a lot. A pharma giant, a government messaging platform, two universities, and a healthcare administrator all had breaches disclosed within the same few weeks. Different organizations, different countries, different kinds of data. But when you look at how each one actually played out, […]