Insights

Last week felt like a century made of "daycades," with each day like living a full decade. From the US government's ban on DeepSeek in federal civilian agencies, to a certificate authority with a private key of 4, to the PHP vulnerabilities, it seemed like the flood was never going to end. I struggled to focus long enough to get this blog out, and kept hearing echoes of multiparty disclosures past, starting with the first one, Dan Kaminsky's DNS bug. This bug was the first to

These models are like the world's cleverest octopus escape artists, with unlimited prehensile arms and the ability to squeeze through anywhere. A single vulnerable package proxy stood between the model and the internet. Labs and government evaluators need the ability to contain, monitor, and disclose to affected parties when an AI pulls another Houdini, ideally before it harms a third party.

The White House launched a federal vulnerability clearinghouse to coordinate scanning, validate findings, and prioritize remediation across open source and critical infrastructure. My latest blog examines whether this will fix the process gaps exposed by recent incidents and what all security leaders should prioritize.

Chinese models have been accelerating, in part by distilling US frontier models. Cutting off Fable 5 and Mythos 5 inconvenienced them too, but it did not slow them down

Restricting Fable and Mythos has the same unintended consequence of harming defense while doing nothing to impede attackers. We can't export control our way to cyber resilience.