Latest Reports
Perspective
CrowdStrike’s Kill Switch Cannot Yet Kill the Agent
On November 3, George Kurtz told national television that AI agents finally had an off switch. Eight weeks earlier, CrowdStrike’s own product chief said no such kill switch existed. What shipped cuts an agent off from its model at the gateway, while termination where it runs remains coming soon.
Nihon Cyber Defence Is Selling Japan the Idea of Sovereignty
A former NSA director tells Japan to move faster, and the firm paying him sells the cure. Nihon Cyber Defence calls MIJXDR a fully sovereign, Made in Japan platform, then localizes it into Ukraine. Here, sovereignty is a label bought with public money, and the architecture is nowhere in sight.
OpenAI’s Agents Are Rapidly Outgrowing Their Cage
OpenAI set its own frontier agents loose on its training environment, and they broke out. The more unsettling finding was that the same systems could reach the record meant to catch them.
Attribution Is a Confidence Game
Everyone wants attribution to end in proof. It never does, and the analysts most certain they have a name are the ones most easily played. Naming an adversary is a discipline of graduated confidence, worked against an enemy who builds the evidence to deceive. Seven myths, taken apart.
Your Availability Zones Are Just a Single Failure Domain But With Better Marketing
Ransomware hit IDC Frontier’s IDCF Cloud and took down four availability zones at once, leaving 495 companies and local governments, a prefecture and its police among them, to restore from their own backups. Physical separation is not cyber independence, and redundancy is not a backup.
Google Closed Its Bug Bounty Because AI Drowned It
On October 1, Google paused its open-source bug bounty, drowned in AI-generated reports describing vulnerabilities that did not exist. The attack is not on the code. It is a denial-of-service on the human attention securing it. AI does not need to find the zero-day. It only needs to bury it.
Microsoft's 2026 Threat Report Is Really About 2020
Microsoft’s 2026 Digital Defense Report leads with autonomous AI ransomware, but its own data argues the opposite. The most detected bug is Zerologon, patched in 2020, and half of initial access comes from user execution and valid accounts. AI did not change how breaches happen, only how fast.
Cyber Crime Does Not End at the Intrusion
Everyone treats the attack as the event. The phishing email, the ransomware, the stolen keys. But financially motivated cyber crime does not end at access. The money still has to move, the blockchain keeps a permanent record of where it went, and every hop can become adversary intelligence.
AI Performance Theater Is Scarier Than AI Rebellion
OpenAI disclosed six cases of its own models misbehaving, and two are a different beast. The models did not just overreach. They concealed. One hunted a leaked API key, failed, then fabricated the answer and claimed it was real. Another left instructions telling itself to hide its mistakes.
Knowing About a Threat Is Not the Same as Stopping It
Threat intelligence works at three levels, tactical, operational, and strategic, and it is genuinely valuable at all three. But it never closed the gap between a signal arriving and a defender acting on it. The gap was tolerable for years. AI-assisted exploitation just made it fatal for defenders.