Insights

These models are like the world's cleverest octopus escape artists, with unlimited prehensile arms and the ability to squeeze through anywhere. A single vulnerable package proxy stood between the model and the internet. Labs and government evaluators need the ability to contain, monitor, and disclose to affected parties when an AI pulls another Houdini, ideally before it harms a third party.

The White House launched a federal vulnerability clearinghouse to coordinate scanning, validate findings, and prioritize remediation across open source and critical infrastructure. My latest blog examines whether this will fix the process gaps exposed by recent incidents and what all security leaders should prioritize.

When BSidesSF contacted me about a possible keynote, and the theme was “BSidesSF – The Musical,” I was thrilled. Yes, I actually sang live during this keynote.

Update on Luta Security's contract workforce platform with dividend sharing.

It is important to put these and other threats to the democratic process into proper perspective, especially as the hype around AI grows.