Prompt injection is not a bug you can patch
Prompt injection is not a bug that a better model can patch. If an AI agent is tricked, the real question is what it can access, change or send before anyone notices.
cybersecurity
How would you turn off your AI if it went rogue?
If an AI system starts behaving in ways you did not expect, who can actually stop it? Here's a practical guide to designing AI shutdown capability, from authority and access controls to safe fallbacks and a realistic kill-switch checklist.
The Essential Eight is not enough for AI-enabled cyber attacks
The Essential Eight is a vital protective baseline, but it is not enough to protect against AI-enabled cyber threats. Why organisations need stronger controls, assurance, resilience and recovery in the age of AI agents.
US cloud act, sovereignty, and why you might need to care
Airbus’s move to European cloud hosting is a reminder that data residency is not the same as digital sovereignty. Where your cloud provider is headquartered, and which laws it answers to, can matter as much as where your data sits.
When AI escapes containment: rethinking data protection in the agentic era
When frontier AI models start “escaping containment” and hacking real systems, the threat model for every organisation changes overnight.
Machine overmatch in an age of software-defined war
Ukraine has shown that modern war is increasingly software-defined, data-dependent and commercially entangled. Salt Typhoon reveals what this means in peacetime: adversaries are mapping telecommunications, infrastructure and digital ecosystems long before a crisis begins.
AI has changed the cyber threat landscape
Artificial intelligence is now a first‑order cyber risk driver, as well as a productivity tool. AI‑accelerated threats, fragile model “harnesses,” and concentrated dependence on a few vendors demand urgent uplift in governance, resilience, and incident response.