Subscribe
Sign in
Home
Notes
Shop
Coffee
Archive
Leaderboard
About
Latest
Top
Discussions
AI Governance Is Not a Legal Project
Why the organizations that succeed will treat AI governance as a controls, evidence, and engineering problem
12 hrs ago
•
Marcus
Your AI Agent Has Permissions. Now Give It Guardrails.
Why the NIST AI RMF’s Manage Function May Become One of the Most Important Security Frameworks for Agentic AI
Oct 2
•
Marcus
4
September 2026
The Cyber Tripwire Hiding in Plain Sight
How Canary Tokens Can Alert You the Moment Someone Starts Snooping
Sep 30
•
Marcus
AI Is Entering Critical Infrastructure. NIST Is Asking What Trust Should Look Like.
The proposed AI Risk Management Framework profile could give infrastructure operators and AI vendors a shared way to define, test, and communicate…
Sep 28
•
Marcus
Securing the Vibe Coding Workflow: Practical Security Habits for AI-Assisted Developers
The Practical Security Checks I Added Before Trusting AI-Generated Code
Sep 25
•
Marcus
2
2
When Encryption Isn't Enough: The New BitLocker Bypass That Has Security Teams Paying Attention
A Newly Released Windows Exploit Reignites Questions About Full-Disk Encryption, Physical Access, and Vulnerability Disclosure
Sep 23
•
Marcus
The Fourth-Party Problem: Why Your Vendor's AI Model Is Your New Biggest Risk
Your vendor passed the audit. Their foundation model provider didn't and you never asked.
Sep 21
•
Marcus
When AI Interviews AI: The Quiet Collapse of Vendor Risk Assessment
Gartner's 2026 warning reveals how automation on both sides of the questionnaire is creating an illusion of insight and what security leaders must do…
Sep 18
•
Marcus
Fake ChatGPT Sites Are Infecting Windows and Mac Users With Malware
Why Cybercriminals Are Turning AI Hype Into a Powerful Malware Delivery System
Sep 16
•
Marcus
1
Beyond the Chatbot: Securing AI Agents with the NIST Risk Management Framework
The Manage function is where agentic AI governance becomes real and most organizations are treating it like an afterthought.
Sep 14
•
Marcus
From Paper Tiger to Armed Regulator: How the EU AI Act Is Closing NIST's Enforcement Gap
The NIST AI RMF gave us structure. The EU AI Act just gave us teeth. Here's what the AI Office's new investigative powers mean for your compliance…
Sep 11
•
Marcus
The Mac Screen Sharing Bug That Hands Attackers Root Access - No Password Required
CVE-2026-65400 is being actively exploited in the wild, and it's not a phishing attack or user error. If your Mac has Screen Sharing enabled and port…
Sep 9
•
Marcus
2
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts
