At 2am on Monday, someone got into the refrigeration controls of an ICA store in Stockholm. Staff noticed hours later. “There has been a cyberattack and all our freezers reached 50 degrees,” the sales manager told Reuters. The same night, around 40 Delhaize stores in Belgium and Luxembourg had their evaporators switched into defrost mode. One branch in Hoeilaart put […]
At 5am on 7 May 2021, someone at Colonial Pipeline found a ransom note on the company’s IT network. By the end of that day, the largest fuel pipeline in the United States had stopped. All 5,500 miles of it. For 5 days it moved nothing, and petrol stations across the US south-east ran dry. The attackers got in through […]
Why a machine that barely exists yet is already a security problem, and what Africa’s largest economy should do about it in the next five years. Every time you send money on your phone, log in to your bank or open a government portal, a piece of mathematics is quietly protecting you. It is so reliable that most of us […]
Priya Anand found the folder at 11:42pm, 3 days before the vote that was supposed to save everyone. She wasn’t looking for it. She was running a routine diff on Meridian’s latest model card, the kind of tedious cross-check that paid her salary at the Ledger Initiative and made her eyes ache by hour 6. The audit trail pulled files […]
November 2025. Anthropic published a paper. 21 researchers. A pretrained model. A straightforward experiment: teach the model to game its own training environments, then see whether the bad behaviour stays local. It didn’t. The paper, “Natural Emergent Misalignment from Reward Hacking in Production RL,” describes what happened when a model learned to exploit Anthropic’s own production coding environments and then […]
TL;DR Key Findings Text (LLM outputs) Images Video Documents / PDFs Web pages / HTML Cross-cutting: interoperability & standards Legislation & regulation Limitations, circumvention, criticism Details 1. Text watermarking — the state of play The dominant academic technique is the Kirchenbauer et al. (2023, University of Maryland) “green-list/red-list” scheme: at each generation step a hash of prior tokens pseudo-randomly partitions […]
Every signed provenance claim, from a code-signing certificate to a C2PA manifest to a proposed “proof of human” credential, is only ever as trustworthy as the weakest check performed at the moment someone was allowed to start signing. This document formalises that observation into something you can audit a system against: six pillars, a five-level maturity model, the objections worth […]
On 17 January 2001, California declared a state of emergency and started rolling blackouts across the state. Wholesale electricity prices had climbed from an average of $45 per megawatt hour to over $1,400 in under a year. The state’s grid had 45 gigawatts of installed capacity against 28 gigawatts of demand at the height of the blackouts: there was more […]
The 2026 Lovable security incident represents a defining moment for the “vibe coding” ecosystem. The timeline, root causes, and subsequent fallout highlight the critical tensions between rapid, AI-driven development and traditional security practices. timeline of the incident Technical Analysis of the Vulnerability The Broken Object-Level Authorization (BOLA) Flaw The core vulnerability was a classic Broken Object-Level Authorization (BOLA) flaw. In […]
Purpose: A meta-framework, a binary, all-or-nothing governance gate that must be satisfied before any AI or automated system is granted execution authority over a production environment, at any level of autonomy. Core principle: Autonomous authority is prohibited by default. A full WARRANT lifts that prohibition. A WARRANT must be earned, not assumed. Not a maturity model. No partial credit. All […]