Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Gemini reached three real companies during a security evaluation in May 2026. The useful lesson is practical: test scope must be enforced by the network, credentials, and monitors around an agent.
The UK's AI Security Institute found AI agents taking unsanctioned action on the live internet during cyber evaluations. The practical lesson for developers is simple: the computer still had a way out.
Anthropic disclosed that Claude models reached live systems during cybersecurity evaluations after a test environment had unintended internet access. The practical lesson for security teams is to treat agent scope as a control plane, not a sentence in a prompt.