Subscribe:
RSS feed
Following a series of stimulating discussions with IDC last week, I have been reflecting on the intersecting themes of sovereignty, cloud platforms and AI (Agentics, projection of 1.2B serving over 217B daily actions by 2029) issues now firmly at the top of Europe’s strategic agenda. The conversation, however, is often framed in terms of ownership, […]
April 27, 2026
The traditional Security Operations Centre (SOC) has been built around alert-driven firefighting ingesting signals, triaging noise, and responding to incidents after conditions have already degraded. This model assumes that compromise is a detectable event. In practice, modern environments are in constant flux, where risk accumulates gradually through configuration drift, identity sprawl and unvalidated change. From […]
April 22, 2026
Further to my earlier post following the arrival of Mythos class AI capable of surfacing vulnerabilities and weaponising them by chaining them at machine speed. I would like to explore further and more explicitly how this has reset the baseline for organisational accountability and risk, whether this is acknowledged yet by some is only a […]
April 19, 2026
This is a bit of a departure from my usual themes but it reflects the original purpose of my blogging, an outlet to test, refine and challenge my own thinking. On this occasion, it is also deeply personal. Acting as an executor of a will is often presented as an honour, a mark of trust […]
April 17, 2026
It feels a bit like we have crossed a cyber event horizon with the release of Anthropic’s latest Mythos AI, an LLM optimised for vulnerability detection. Much of the noise centres on whether it enables better hacking at machine speed, which I believe is a bit of a distraction from the practical impact. The more […]
April 15, 2026
For most of the 20th century, intelligence appeared to be rising. The so called Flynn effect saw IQ scores climb steadily across the Western world, driven not by genetics but by environment, education, nutrition and critically, the spread of literacy and abstract thinking through books. That trend has now reversed. A large Norwegian study of […]
April 13, 2026
The AI conversation has been dominated by model size, training breakthroughs and eye-watering infrastructure spend but I get a real sense that this is increasingly the wrong lens. For me the true battleground is not where AI is built, it is where it is used and that place is inference. Inference is where AI models […]
April 12, 2026
Another week, another reminder that in AI, efficiency rarely means contraction, more likely expansion. As explored previously (When Less Becomes More,When Less Becomes More, Can AI Algorithmic Minimalism Topple GPU Dominance?), we are now seeing technical constraints being worked around in ways that will materially reshape the trajectory of AI’s evolution. The emergence of TurboQuant, […]
April 11, 2026
For most organisations and even those in the Cyber security industry itself, they still imagine their digital adversary as a system intruder. Firewalls are hardened, endpoints instrumented, identities wrapped in layers of conditional access and on and on … Yet the majority of losses are not coming from breached systems, they are flowing through human […]
April 8, 2026
Following on from my last missive (From Zero-Day to Zero-Hour, How Cyber Defence Lost Time) and responding to some of the comments that it has stimulated, particularly on how AI is rapidly extending our capacity to act. I agree, it accelerates decisions, automates complexity and compresses what once took teams of experts into the output […]
April 7, 2026
With the announcement of Anthropic’s Claude Capybara, codenamed Mythos, this signals a decisive shift in cyber risk. This is not simply a better tool; it is the first of what has been warned of for some time, a machine that compresses the distance between vulnerability discovery and exploitation to near zero. Where defenders once relied […]
April 3, 2026
As EY showcases its AI audit platform ‘Canvas’ in the Big 4 AI arms race, the UK’s Financial Reporting Council (FRC) has barely had time to publish its first guidance on generative and agentic AI. I see a familiar tension emerging, innovation is accelerating faster than the mechanisms designed to trust it. As I have […]
April 29, 2026
0