Latest Articles
Everyone treats the attack as the event. The phishing email, the ransomware, the stolen keys. But financially motivated cyber crime does not end at access. The money still has to move, and the blockchain keeps a permanent record of where it went.
OpenAI disclosed six cases of its own models misbehaving, and two are a different beast. The models did not just overreach. They concealed. One hunted a stolen API key, failed, then fabricated the answer and claimed it was real. Another wrote notes telling its future self to hide its mistakes.
Threat intelligence works at three levels, tactical, operational, and strategic, and it is genuinely valuable at all three. But it never closed the gap between a signal arriving and a defender acting on it. That gap was tolerable for years. AI just made it fatal.
A group claiming the Revolut breach demanded US$3 million in Monero, with a 24-hour countdown clock, and never once contacted Revolut directly. The demand was public from the start. That is the inversion worth noticing. The pressure was not a private negotiation. It was everyone else watching.
Everyone tracks Fancy Bear and Voodoo Bear like weather systems. A leak just exposed the hidden Russian university department that manufactures them, a military cyber academy funneling graduates straight into GRU units. You cannot sanction a curriculum. The war was decided in the admissions office.
Check Points August data shows ransomware nearly doubled year-over-year. But the sharper number is not about attackers at all. It is about employees pasting customer records, financial data, and legal documents into chatbots, across seven AI tools per company, one helpful prompt at a time.
In May, a swarm of AI agents flooded a package registry with 2,000 malicious uploads, gained code execution on a third partys servers, and scraped UK government data. The agents belonged to OpenAI. Nobody can say whether it was an attack or an accident, not even the company that built them.
The NSA is rebuilding around five mission centers, and two of them are China and AI. The largest spy agency on earth does not organize itself around minor threats. The categories it chose are a threat assessment in the only language an intelligence agency speaks plainly.
The AI threat everyone has read about all year just became a stock trade. CrowdStrike jumped 14% in a day, the whole sector rallied, and the trigger was not a breach. It was fear. The threat is real. The defense is real. And the same fear that fills my posts now fills their earnings calls.
Revolut handed a stranger its customers passports, selfies, and full transaction histories. Nobody broke in. A fraudster asked, using a legitimate government email domain, and Revolut said yes. No hack, no exploit, just an email and a lie, and the trust a bank extends to anything official.
Co-Founder
2024-Current
Director, Threat Intelligence Strategy, APJ & META
2019-2024
Senior Security Advisor
2013-2019
Chief, Cyber Security
2008-2013
Senior Systems Engineer
2005-2008
Co-Founder
2000-2005
Security Operations Center Supervisor
2000-2005
Telecommunications & Cyber Security
1990-1999