Tracking the Fleet of the Rich: Maritime OSINT, a Radio, and an AI Agent

Posted on September 3, 2026 by Simon Roses

Read Time: 14 minutes

TL;DR

A superyacht is one of the most private things money can buy, and one of the easiest things in the world to find. Every large vessel broadcasts its identity, position, course, and destination in the clear over VHF radio, because a collision-avoidance safety system — AIS — requires it. Four free websites — MarineTraffic, VesselFinder, ShipFinder, and Maritime Database — turn that firehose into a searchable map where a single anchorage off Mallorca becomes a labeled guest list of the world’s wealthy, each hull tagged with its past track, its next port, and a route forecast button. Owner directories close the last gap from hull to human. And you don’t even need the websites: a ~200€ PortaPack decodes AIS straight off the air, which means suppressing your boat online does nothing about the radio that is still transmitting it. Now add AI, and the game changes shape: an agent fuses AIS with ownership records, news, and social posts into a live dossier, learns a target’s pattern-of-life, predicts the next anchorage, and pings you the moment the vessel appears — unattended. This is a security piece, not a how-to. It is written for the people who own, run, and protect these vessels, because a predicted anchorage is a location for a person. Method at the threat-vector level, defenses at the end, no targets named.

Disclaimer. This is defense-oriented and kept at the threat-vector level. It uses only publicly available data and public tools, names no human target, and pairs every capability with a countermeasure. The goal is OPSEC and executive-protection awareness for the people who own, crew, or protect these vessels — not a manual for anyone with worse intentions. As with the rest of the SRF-IWS series, I lean on AI to help build realistic, defense-oriented scenarios, and every vessel name shown here is already public on the platforms in the screenshots.

I have spent this blog crawling networks, hardware, and now AI agents looking for the place where a system leaks more than its owner thinks. The sea turned out to be one of the most generous leaks I have ever looked at — and unlike a misconfigured server, this one leaks by law.

Let me show you what an afternoon, a browser, a cheap radio, and an AI agent can reconstruct about where the wealthy actually are.

The marina is a guest list

Point any of these tools at Puerto Portals or the bay off Palmanova on a summer evening and the map does something a little obscene: it labels the anchorage. Not “yacht.” The names. A screen full of them, each one a hull worth tens or hundreds of millions, each one clickable.

srf_maritime_shipfinder_portals

Figure 1. A free website turns a summer anchorage off Mallorca into a labeled guest list.

That is not a leak in the hacking sense. Nobody broke anything. That is the system working exactly as designed — which is the whole point, and the whole problem.

Why the sea has no privacy: AIS

The Automatic Identification System exists for a good reason: ships hitting each other in the dark is bad, so since the SOLAS convention, vessels above a certain size (and effectively every serious yacht) carry an AIS transponder that continuously broadcasts, over marine VHF, who they are and where they are. Identity (name, callsign, MMSI, IMO number), position, course, speed, navigational status, and often the destination they typed in — all in the clear, as often as every few seconds when a vessel is under way, to anyone listening.

There’s a size line worth knowing, because it decides who can’t opt out. Under SOLAS, a Class A transponder is mandatory for vessels over 300 gross tons and all passenger ships; smaller pleasure craft use the lighter, largely voluntary Class B, which can legally be switched off. Notice which side of that line the interesting boats fall on: essentially every superyacht in these screenshots is well over 300 GT, so the biggest, most-protected hulls on the water are precisely the ones the law forbids from going dark.

It is a safety beacon. It is also a tracking beacon. Those are the same signal. A technology built so a tanker doesn’t run down a fishing boat is, from the OSINT chair, a fleet of the world’s richest people voluntarily announcing their coordinates on an open channel.

srf_maritime_marinetraffic_med

Figure 2. The raw AIS firehose across the Mediterranean — thousands of vessels, all self-reporting.

At this zoom it is just noise. The tools exist to turn the noise into an address.

The toolkit: turning the firehose into a map

The aggregators all do the same core thing — ingest global AIS (from terrestrial receivers and satellites) and render it as a live, searchable map — and you use several of them precisely because they disagree at the edges, which is how you cross-verify. MarineTraffic, VesselFinder, and ShipFinder are the big three; Maritime Database is the reference layer that gives you baselines on ports and vessel classes. All freemium: the map is free, the deep history and the exact live coordinates sit behind a subscription. And because the feeds come from satellites as well as shore receivers, coverage isn’t only coastal — anchoring offshore, out of anyone’s VHF range, does not take a vessel off these maps.

The method is a funnel. Start global, zoom to a region known for money, then to a specific marina.

srf_maritime_marinetraffic_balearic

Figure 3. Zoom to the Balearics and the pleasure-craft layer (purple) separates from commercial traffic.

srf_maritime_marinetraffic_portals

Figure 4. Three clicks from “somewhere in Europe” to a specific berth in Puerto Portals.

Three clicks from “somewhere in Europe” to “this specific berth.” Cross-check the same spot on VesselFinder and ShipFinder and the picture firms up.

srf_maritime_vesselfinder_global

Figure 5. VesselFinder — a second aggregator to cross-verify against.

srf_maritime_shipfinder_global

Figure 6. ShipFinder — a third, because where the tools disagree is where you learn something.

From a dot to a dossier

Click a single hull and the map stops being a map and becomes a file. Here is one vessel I pulled at random from the Mallorca anchorage — a 124-metre yacht flying the Qatari flag, name KATARA, sitting at anchor after an overnight hop from Barcelona to Palma.

srf_maritime_katara_card

Figure 7. One click on a hull: type, flag, Barcelona→Palma, reported ETA, “At Anchor,” and buttons for Past track and Route forecast.

The card alone gives you the voyage: where it left, when, where it is going, when it expects to arrive, and whether it is moving or parked. Open the full page and it deepens into something closer to an intelligence product.

srf_maritime_katara_details

Figure 8. The full file: IMO 9562805, MMSI 466066000, 124 m, and tabs for Port call log, Ownership and “In the news.” The exact latitude/longitude sits behind “upgrade to unlock” — a paywall, not a privacy control.

Read that detail page like an attacker and it is a gift: a permanent identifier (the IMO number never changes, even if the vessel is renamed or reflagged), a complete history of every port it has called at, an Ownership tab, and a route forecast. The only thing hidden is the precise lat/long — and that is hidden to sell you a subscription, not to protect anyone. VesselFinder shows the same hull with its own particulars and, tellingly, its neighbours.

srf_maritime_vesselfinder_katara

Figure 9. Not just one vessel — its neighbourhood. Who anchors near whom is its own kind of intelligence.

That last screenshot is the one that should worry a protection detail. You did not just find one vessel. You found its neighbourhood — who anchors near whom, which is its own kind of intelligence.

srf_maritime_katara_photo

Figure 10. And here it is. The trackers said a 124-metre yacht was off Mallorca; a walk to the shoreline and a phone camera confirmed it. The data was never abstract — it was a hull you could stand and watch.

A second hull, same result

None of this is cherry-picked. Point the same three tools at the next dark hull in the bay and the file assembles itself again. This one is KISMET — a 122-metre yacht under the Marshall Islands flag, built in 2024, at anchor off Portals after a run down from Port Vendres.

srf_maritime_kismet_details

Figure 11. A different hull, the same dossier: IMO 9881627, MMSI 538071476, callsign V7A2834, Marshall Islands flag, 122×17 m — voyage, draught, and at-anchor status, all from one page.

srf_maritime_kismet_map

Figure 12. And its neighbourhood — KISMET at anchor in a bay the map has labelled with the name of nearly everything around it.

srf_maritime_kismet_photo

Figure 13. Same ending as before: the data said a 122-metre yacht was off Mallorca, and there it was from the shoreline. The method doesn’t care which hull you point it at.

From vessel to person

Tracking a hull is easy. The real OSINT work is the last hop: hull to human. It is a chain, and every link is public.

The IMO number gives you a permanent handle on the hull — it survives renaming and reflagging — while the MMSI tracks the current registration, so if it changes, that itself is a tell. From there you walk the flag and registry to a registered owner, which for any serious yacht is a management company or a holding entity in a friendly jurisdiction — a deliberate curtain. But the curtain has holes: yacht-owner directories such as SuperYachtFan exist specifically to map hulls to the people behind them and do the deanonymization for you; the press names owners every time a yacht is bought, sold, or involved in anything; and the vessel’s own In the news tab often hands you the connection directly. Cross-reference three public sources and the holding company stops hiding anyone.

I am deliberately not going to close that loop on a named individual here. The point is that the loop closes, cheaply, and that the people who most need to understand it are the ones aboard.

The part that defeats “just turn it off”: the radio

Here is where my old world — wardriving and RF, the stuff I have been doing since before it was fashionable — walks back into the story.

Everything above used websites. You don’t need them. AIS is just VHF radio on two channels (161.975 MHz and 162.025 MHz), and a PortaPack running the open-source Mayhem firmware decodes it passively, straight off the air — AIS Boats shows the MMSI, name, and the latest position each vessel transmits, with no account, no subscription, and no internet connection at all. A pocket device and an antenna, sitting quietly in a marina car park.

srf_maritime_portapack_menu

Figure 14. A HackRF One + PortaPack H2 running the open-source Mayhem firmware. AIS Boats is a built-in receive app — no PC, no internet.

srf_maritime_portapack_list

Figure 15. The same hulls, received passively off VHF — and there, highlighted, is KATARA (MMSI 466066000): the exact yacht we pulled off MarineTraffic a moment ago, now heard straight off the air. No account, no subscription.

srf_maritime_portapack_detail

Figure 16. KATARA decoded straight off VHF: name, Qatari flag, MMSI 466066000, at anchor — and its exact position, 39.51°N 2.57°E, the very latitude/longitude MarineTraffic charged a subscription to hide.

And it isn’t a one-hull trick. Leave the receiver running and the bay fills itself in. There, in the live list of everything the antenna is hearing, is KISMET — the same 122-metre hull we pulled off VesselFinder a few sections ago, arriving now straight off the air, sitting in a car-park’s worth of its neighbours.

srf_maritime_kismet_portapack_list

Figure 17. The live receive list on Channel 87B — and there, highlighted, is KISMET (MMSI 538071476), heard passively alongside QATAR 2, CALLISTO III, and a dozen other hulls the antenna plucked out of the air.

srf_maritime_kismet_portapack_detail

Figure 18. KISMET decoded straight off VHF: MMSI 538071476, callsign V7A2834, Marshall Islands, destination ESPMI (Palma), at anchor — and the exact position, 39.52°N 2.59°E, matching the VesselFinder page to the decimal.

srf_maritime_kismet_portapack_map

Figure 19. No website anywhere in the loop: the PortaPack takes the position it just decoded and plots KISMET on its own map. RF in, a dot on a chart out — offline, from a device that fits in a pocket.

This is the point that matters most for defense, so I will say it plainly: suppressing your vessel online is not radio silence. The aggregators offer opt-outs and privacy filters, and owners pay for them — but those only affect what the websites display. SOLAS still requires the transponder to transmit. Anyone within VHF range — a few miles, more from a hill or a drone — still receives the broadcast the website is politely hiding. You can pay MarineTraffic to stop showing you. You cannot pay physics to stop propagating you. And notice the twist in Figure 16: the precise position MarineTraffic put behind a paywall, the radio gives away for free. Paywall is not privacy, and opt-out is not silence.

One honest caveat, because it cuts both ways: AIS has no authentication. The same openness that lets you receive it lets anyone forge it — spoofed MMSIs, ghost positions, and vessels that simply switch off and go dark are a routine feature of sanctions-evasion “dark fleets.” For the tracker, that means the signal can lie. For the defender, it means deception is on the table too: where the law of your flag and waters allows it, a decoy track is a legitimate protective option.

Where AI changes the shape of the problem

Everything so far is 2016 OSINT with a 2026 coat of paint. Here is what actually makes this a new problem, and it is the thread that runs through everything else I write on this blog: the hard part of OSINT was never finding the data. It was correlating it. That is exactly the labor AI collapses.

Fusion into a live dossier. The manual version of this article is an analyst spending a week stitching AIS positions to an owner directory to news archives to a management-company filing to a crew member’s public Instagram. An agent does it in a prompt: give it a vessel name and it queries the trackers, pulls the owner directory, scrapes the news tab, correlates the social posts, and hands back a single profile. The week becomes a minute.

Pattern-of-life and prediction. The trackers already ship a route forecast button for a single voyage. Feed a model a season of historical AIS and it generalizes: this vessel summers in the Balearics and the Tyrrhenian, favours these three anchorages, moves on weekends, and — given the current track — is most likely headed here next. Tracking that used to report now predicts. A predicted anchorage, forty-eight hours out, is a place to position a camera, a boat, or something worse.

Deanonymization at scale. The hull-to-human chain I walked by hand is a cross-referencing task, which is what these models are unreasonably good at: point one at the registries, the leaks, the directories, and the news, and it bridges shell to owner faster than any curtain can be redrawn.

Vision geolocation. A guest posts a sunset from the aft deck. A vision model places the coastline, the marina, the mountain profile — and cross-references AIS to confirm the vessel was there. The boat can be “dark” online and still get put on the map by a stranger’s holiday photo.

Cross-domain correlation. The wealthy rarely arrive by sea. They fly in — private jet to the island, helicopter to the deck — and aircraft broadcast their own cousin of AIS called ADS-B, on 1090 MHz, which the same PortaPack in Figure 14 decodes too. Correlate the ADS-B track of a known tail number with the AIS track of a hull and you stop tracking a boat and start tracking a person: the jet lands, the helicopter hops to the anchorage, the owner is aboard. Sea plus sky is the difference between “the yacht is here” and “the principal is here, right now.”

The autonomous agent. Wire the above into a loop that runs unattended: watch for a target MMSI to reappear anywhere on the global feed, enrich it, and alert. This is the same shift I wrote about in When the Model Is the Attacker and How to Weaponize AI Agent Skills, pointed at the ocean: the adversary is no longer a person watching a screen. It is an agent that never sleeps and pages a human only when the target surfaces.

And the version that removes the last trace: the PortaPack captures AIS off the air, a local open model running on your own hardware enriches the raw MMSI into an identity, and nothing you did ever touched a website or left a query log. RF in, dossier out, entirely offline.

Who actually cares

srf_maritime_kill_chain

Figure 20. The whole chain in one view — collect AIS (web or radio), resolve hull to person, enrich and predict with AI, act on the location. Every step uses public data and public tools; no step is “hacking.”

Name the threat model plainly, because “someone can see the boat” only lands when you attach it to intent. Kidnap-for-ransom crews and modern piracy plan around a known location. Stalkers and obsessives do not need much. Activists and paparazzi want the shot and the story. Business rivals want the meeting nobody announced — two yachts anchored together for a weekend is a signal. Sanctions and nation-state trackers do this at industrial scale already. In every case the output is the same: a place, a time, and a person who thought the sea made them unreachable.

The defensive playbook

None of this is an argument to panic. It is an argument to plan around reality, and the reality is that presence is knowable. Here is what I would tell a principal or a protection detail.

Treat AIS as an OPSEC decision, with a real safety trade-off. You can reduce transmission (silent/receive-only modes, or lawfully switching off in specific circumstances), but AIS exists to stop collisions — going dark trades a tracking risk for a safety risk, and in busy waters that is not a trade to make casually. Know the rules for your flag and your waters, and make it a deliberate decision, not a default.

Understand that obfuscation only half-works. Renaming, reflagging, and holding the vessel through a management company all raise the cost of attribution — but the IMO number is permanent, the directories catch up, and the press does the rest. Obfuscation buys time and friction, not invisibility. Budget accordingly.

The leak is usually a person, not the transponder. Crew and guest social media geolocates your vessel more reliably than AIS ever will. A published crew roster, a tagged sunset, a marina selfie — that is the exploit. OPSEC training for everyone aboard is worth more than any privacy subscription.

Turn the tools on yourself, first. Everything an adversary can build, you can build defensively. Run the fusion agent against your own vessel, geofence it, and alert yourself when your footprint becomes trackable or when the pattern-of-life gets too predictable. Vary the routine the model is trying to learn. Monitor your own exposure the way the other side monitors it.

Accept the physics and protect around it. You can suppress the website; you cannot suppress the VHF. Plan protection on the assumption that a motivated party can know when and roughly where the vessel is — because with a cheap radio and an AI agent, they can.

So what

The sea used to feel private because it was empty. It isn’t anymore. A safety beacon that vessels are required by law to transmit, four free websites, a two-hundred-euro radio, and an AI agent that never sleeps turn an ocean into an address book — and the entries are some of the most protected people on earth, publishing their coordinates on an open channel every thirty seconds.

The uncomfortable part is that there is no vulnerability to patch here. Nothing is broken. AIS is supposed to do this; the tools are legal; the data is public; the AI just makes the correlation instant. That is precisely why it belongs on a security blog and not in a headline about a hack. The exposure is structural, the mitigation is operational, and the people who need to understand it are the ones who assume that money and a hull between them and the shore add up to privacy.

srf_maritime_pipeline

Figure 21. Why it’s structural, not a bug — a broadcast the law requires, an opt-out that isn’t radio silence, and a public hull-to-human chain feed one pipeline, from a mandated safety signal to a person, place, and time.

They don’t. Assume you’re broadcasting — because you are.

Stay paranoid. Watch your own signal. Vary the routine.

Further Reading:

Questions or feedback? Reach out via:

Contact: info@vulnex.com

Posted in AI, Business, Economics, Privacy, RF, Security, Technology | Tagged , , , , , , | Leave a comment

Information Warfare Strategies (SRF-IWS): Spyware as Statecraft — How States Blackmail States

Posted on August 28, 2026 by Simon Roses

Read Time: 15 minutes

TL;DR

Commercial spyware collapsed the price of the oldest move in statecraft: know what the other side knows, and hold something over the people who decide. A mid-sized state can now rent zero-click capability that used to belong only to top-tier intelligence services, point it at another country’s prime minister, and turn the take — private messages, locations, contacts, negotiating positions, personal secrets — into leverage over a border, a vote, a recognition, a venue. This is the SRF-IWS entry on coercion by malware: how it works as a doctrine, and how a government defends against it. The public case study is the Pegasus affair in Spain — it is confirmed that the phones of Prime Minister Pedro Sánchez and Defence Minister Margarita Robles were infected with NSO Group’s Pegasus in 2021; it is alleged and under judicial investigation, and firmly denied by Rabat, that Morocco was behind it; and it is my analysis, not a proven fact, that the intrusion sits inside a broader pattern of Spanish concessions to Morocco. I keep those three tiers separate on purpose, because the mechanism matters more than the verdict — and the mechanism should terrify every government that still treats a minister’s personal phone as a personal matter. Method at the threat-vector level, defenses at the end.

Disclaimer, doubled — this one names names. This article is defense-oriented and kept at the threat-vector level. Where I state something as fact, it is publicly confirmed and sourced. Where attribution is contested, I say so and note the denial. Where I connect events into a pattern, I label it as my own reading, not a finding. Nothing here is an operational how-to; it is a doctrine-level analysis for the people who build and defend government security. As with the rest of the SRF-IWS series, the goal is Blue Team planning. I am a security practitioner, not a court; treat contested claims as contested.

There is a particular kind of intrusion that does not feel like hacking. No server is breached, no embassy is burgled, no document leaks. A phone — the one in a head of government’s pocket during every classified briefing — simply starts answering to someone else. It keeps ringing, keeps showing the right time, keeps looking exactly like it did yesterday. And somewhere outside the country, a case officer reads the prime minister’s messages before his own chief of staff does.

That is the weapon this post is about, and the uncomfortable part is that it is for rent.

What actually happened: the confirmed core

Let me start with what is not in dispute, because the rest only matters if the foundation is solid.

In May 2022, the Spanish government confirmed that the mobile phone of Prime Minister Pedro Sánchez had been infected with Pegasus, the spyware built by the Israeli firm NSO Group. The Minister for the Presidency, Félix Bolaños, told the press the intrusion was “illicit” and “external” — from outside Spanish state organs, with no judicial authorization. According to the government’s May 2022 account, Sánchez’s phone was compromised twice in May 2021, and Defence Minister Margarita Robles’ device once in June 2021, with a significant volume of data exfiltrated. Days later the director of Spain’s intelligence service, the CNI, was dismissed. The later judicial investigation would put the numbers higher still — reporting five infections of the prime minister’s phone across 2020–2021 and four of Robles’, with more than 2.5 GB of data pulled from Sánchez’s device alone.

Pegasus is the reason this is a story about statecraft and not about phishing. It is a zero-click weapon: at its peak it could compromise a fully patched iPhone with no tap, no link, no mistake by the target — a silent message that installs, executes, and deletes its own trace. Citizen Lab and Amnesty International’s Security Lab documented the technique; the same toolset surfaced in “CatalanGate,” where researchers found at least 65 people in Catalan political and civil-society circles targeted with Pegasus and Candiru between 2017 and 2020 — an operation Citizen Lab tied by circumstantial evidence to a “strong nexus” with Spanish state entities, while explicitly declining to attribute it conclusively.

So the confirmed core is this: the two most security-relevant phones in the Spanish state were owned, for a while, by an outside party. That is not an embarrassment. That is a national-security event.

Who did it: the contested part

Here I slow down, because this is where careful language is not optional.

The Spanish government did not, in 2022, name the author. Since then, the investigation at the Audiencia Nacional has — according to Spanish press reporting — increasingly pointed toward Morocco, and has drawn on judicial cooperation from France, where Pegasus targeting of officials was also alleged. Reporting in 2026 has gone further, tying the May 2021 migration surge at Ceuta — when thousands of people crossed into the Spanish enclave after Moroccan border control abruptly relaxed — to Moroccan retaliation against Spain, and framing the Pegasus operation as part of the same pressure campaign.

Morocco denies all of it. No court has issued a final attribution as I write this — and in January 2026 the investigating judge at the Audiencia Nacional shelved the probe, not for lack of a trail but for lack of cooperation, after Israel ignored five formal requests to help identify who operated the Pegasus licence. The case is suspended, not solved. That outcome is itself the thesis in miniature: this weapon works partly because attribution reliably stalls — the deniability is designed in, and the courts run out of road before the operator is ever named.

So the honest state of play is: the intrusion is confirmed; the author is alleged. I am going to write the rest of this analyzing the pattern — because the pattern is instructive regardless of which state, in the end, is proven to have held the remote. If it turns out not to be Morocco, every word about the mechanism still stands, pointed at whoever it was.

And the conflict is not a closed 2021 file — it is live as I write this. In late August 2026, a hacktivist group calling itself Jabaroot claimed to have leaked personal data on tens of thousands of alleged Moroccan security and intelligence personnel, framing the dump, in its own words, as a message aimed at Spain and tied to the 2026 Ceuta crisis — the largest migrant surge in the enclave’s history, when more than 60,000 people crossed into the Spanish city in a matter of days at the end of July, a breakdown widely reported to have come with a green light from the Moroccan side. The claim is unverified, I am deliberately not reproducing any of that data, and hack-and-leak doxxing is a different instrument from the silent phone implant this article is about. But it belongs here as context: the Spain–Morocco intelligence relationship is an open, two-way covert conflict, and spyware is one tool in a much larger kit. And as of 26 August the leaker has begun gesturing directly at this article’s subject — publicly dangling supposed Pegasus material tied to Sánchez — with no evidence yet that the data is real or in hand.

The mechanism: how a phone becomes leverage

Strip the geopolitics and coercion-by-spyware is a clean, repeatable chain. This is the SRF-IWS core, at doctrine level.

Target selection. You do not need the principal’s phone if you can have the people around it. Chiefs of staff, private secretaries, advisers, spouses, drivers, the journalist the minister trusts — the entourage is the soft edge of a hard target, and each one is a window onto the same room. The principal is the prize; the circle is the way in.

Delivery. Commercial spyware turned capability into a purchase order. Zero-click chains mean the operation does not depend on the target’s mistakes, only on the vendor’s inventory of exploits. A state that could never build this can now license it, aim it, and deny it — the plausible-deniability layer is part of the product.

Collection. Once resident, the implant is not a wiretap; it is the device. Messages before and after encryption, live microphone and camera, location history, contacts, calendars, photos, password vaults. Two distinct kinds of gold come out: kompromat — the private material that makes a person coerceable — and positional intelligence — what the other government actually thinks, fears, and will settle for.

Exploitation. This is where intelligence becomes coercion, and it runs on two rails. The first is blackmail: leverage over an individual, quiet pressure to act, to soften, to look away. The second is subtler and often more valuable: foreknowledge. A state that has read your prime minister’s phone does not have to win the negotiation — it already knows your red lines, your fallback, and the date you will fold. It sits down at the table having read the other side’s notes.

Effect. The output is not data. It is a decision that goes the other way: a border that opens or closes on cue, a vote withheld, a position reversed, a venue awarded. The malware is upstream of foreign policy.

srf_spyware_coercion_kill_chain

Figure 1. The doctrine as an attack tree. The chain is AND across all five phases — you need targeting and delivery and collection and exploitation and effect — with OR inside each, because any single target, route, or payoff will do. Break any one phase and the chain breaks, which is exactly where the defensive playbook aims.

My reading: from intrusion to concession

Now the part I am explicitly flagging as analysis, not fact.

Look at the Spanish timeline the way I look at an attack chain, and a pattern is hard to unsee. The Ceuta surge (May 2021) as raw pressure. The compromise of the prime minister’s phone (May 2021). And then, in March 2022, Spain’s abrupt reversal on Western Sahara — Sánchez backing Morocco’s autonomy plan and ending decades of studied neutrality, a shift that blindsided his own coalition and Algeria alike. Since then, a warming across migration cooperation and the shared 2030 World Cup, down to the pointed dispute over which country hosts the final.

I want to be precise about what I am and am not saying. I am not asserting that spyware caused those decisions; that is not proven and may never be. I am saying that this is exactly what the mechanism above would look like from the outside, and that a government which discovers its leader’s phone was owned during the run-up to a major concession owes its citizens a harder question than it has publicly asked. The value of the case is not a verdict. It is that it makes the doctrine concrete.

This is a category, not a one-off

It would be a mistake — and frankly a less honest article — to treat this as a Morocco story. Commercial spyware as an instrument of statecraft is now a global market, and Europe is both customer and casualty.

The European Parliament stood up an entire committee, PEGA, precisely because member states were caught using this class of tool against journalists, opposition figures, and each other. Poland used Pegasus against opposition politicians. Hungary against journalists. Greece’s “Predatorgate” put the Predator spyware (from the Intellexa/Cytrox alliance) at the center of a scandal reaching the prime minister’s own circle. Beyond Europe, Mexico was among NSO’s largest clients and turned the tool on journalists and activists; the toolset appeared around associates of murdered journalist Jamal Khashoggi; targets surfaced in Jordan, the Gulf, and beyond. The through-line is not one villain. It is that a capability which used to require a Fort Meade now requires a contract, and the guardrails are mostly aspirational.

That is the real warning in the Spain case: not that one neighbor may have crossed a line, but that the line is cheap to cross and almost everyone with a budget is standing near it.

The defensive playbook

None of this is a counsel of despair. It is a counsel of treating the principal’s phone as the contested national-security terrain it now is. Here is what I would put in front of any government protection detail or CISO of state.

Harden the principal’s devices as if they are already targeted — because they are. Locked-down, minimally-provisioned handsets; Apple’s Lockdown Mode (or the platform equivalent) for high-risk principals; aggressive device rotation; and — critically — no personal phone in classified spaces. The convenience device is the attack surface.

Defend the circle, not just the crown. The entourage is the way in. Aides, family, and close staff need the same briefing, the same hardened devices, and the same discipline as the principal. A protection program that stops at one person is theater.

Assume the phone is hostile and design comms around that. Segregate sensitive discussion onto controlled, ephemeral, ideally air-gapped channels. The rule for anything that would be leverage in a foreign capital: it does not happen on a device you carry through an airport.

Instrument for detection. Zero-click implants are quiet, not invisible. Routine forensic acquisition of high-risk devices (the kind of methodology behind Amnesty’s Mobile Verification Toolkit), mobile threat defense, and a standing relationship with a lab that can do real forensics turn “we’ll never know” into “we caught it in the logs.”

Treat a confirmed head-of-state infection as an incident, not an embarrassment. The worst response to owning up that the PM’s phone was compromised is to bury it to avoid the domestic politics. Attribution, consequences, and public accounting are themselves deterrents; silence is an invitation to do it again.

Make it a policy and procurement problem, too. National controls and EU-level regulation on commercial spyware, export controls on the vendors, and hard limits on your own services’ use of these tools — because a state that normalizes buying this capability has no standing to complain when it is used against its own cabinet. The PEGA committee wrote the recommendations; the gap is enforcement.

So what

For most of history, reading another government’s mind required a spy in the room, a mole in the ministry, or a break-in at the embassy — expensive, slow, and dangerous. Commercial spyware turned all of that into a licensing agreement and a phone number. The consequence is that sovereignty now runs through a consumer device: a state that can read your prime minister’s phone does not need to out-argue you, out-maneuver you, or out-wait you. It already knows how you will argue, where you will maneuver, and how long you will wait.

srf_spyware_coercion_convergence

Figure 2. The same thing as a straight line: a sponsoring state acquires deniable capability, compromises the phone, collects everything, converts the take into leverage, and cashes it as a concession. The “weaknesses” it rides — zero-click delivery, rentable spyware-as-a-service, a personal device carried into classified rooms — are structural properties, not software bugs, which is why there is no patch, only a posture.

The Spain–Pegasus affair is the clearest public window we have into that world — a confirmed intrusion, a contested author, and a pattern that should make any government look hard at the device in its leader’s pocket. Whether or not the courts ever name the hand on the remote, the lesson does not wait for the verdict: the phone is not personal, the entourage is the perimeter, and a leader’s private life is now a national attack surface.

Treat it that way before someone else does.

Stay paranoid. Harden the principal. Assume the phone is listening.

Further Reading:

Questions or feedback? Reach out via:

Need help defending principals and sensitive staff against mobile/spyware threats? VULNEX offers:

  • Mobile threat and spyware exposure assessments (executive / principal device hardening)
  • Counterintelligence-aware security programs for high-risk organizations
  • Incident response and mobile forensics for suspected zero-click compromise
  • Security awareness and OPSEC for leadership and their circle

Contact: info@vulnex.com

Posted in AI, Economics, Security, Technology | Tagged , , , , , | Leave a comment

The Death of the Job: How AI and Robots Will Rewrite Work in the Next 10 Years

Posted on August 20, 2026 by Simon Roses

Read Time: 16 minutes

TL;DR

Work is not disappearing. The job is. The salaried, 9-to-5, one-employer-for-decades package we call “a job” is an industrial-age artifact, and AI agents plus humanoid robots are dismantling it piece by piece. Over the next 10 years, repetitive, risky, and simple tasks get automated at both ends: cognitive work by agents, physical work by robots. The 9-to-5 schedule dies first. Remote and hybrid work keep growing even as corporations push back with return-to-office mandates. Companies stop hiring employees and start engaging experts on missions, a contractor model measured in projects, not years of tenure. Universities that keep selling four-year degrees for jobs that won’t exist must reinvent themselves or become irrelevant. The winners of this transition will be the people who treat AI as an amplifier, build a public reputation, and never stop learning. The losers will be the institutions that pretend nothing is changing.

The Job Is an Industrial-Age Artifact

Let’s start with an uncomfortable truth: the “job” as we know it is not a law of nature. It’s a technology. It was invented.

The 9-to-5 schedule, the salaried contract, the single employer, the office, the 40-year career capped with a retirement watch: all of it was designed for the factory and the corporation of the 20th century. Synchronized hours made sense when work meant standing next to a machine or pushing paper through a hierarchy. You needed everyone in the same place at the same time because coordination was expensive.

Coordination is no longer expensive. Intelligence is no longer scarce. And physical labor is about to stop being exclusively human.

I’ve spent the last two years working alongside AI agents daily, as I described in My Experience Using OpenClaw. My agent works while I sleep. It doesn’t have a schedule. It doesn’t have an office. It doesn’t have a job title. And increasingly, neither will we.

Here is my thesis for the next decade: work survives, the job doesn’t. What replaces it is smaller, faster, more fluid, and much more demanding of the one thing machines don’t have: human judgment.

The Automation Wave Is Real This Time

Every automation panic in history ended the same way: more jobs, not fewer. Economists love to point this out. But “eventually more jobs” and “your job survives” are two very different statements, and the transition is where careers go to die.

I’ll steelman the other side, because it has the historical record behind it. The loom, the tractor, the spreadsheet: each provoked exactly this panic, and each time the economy invented more work than it destroyed. Economists even have a name for assuming otherwise, the lump-of-labour fallacy, the error of treating the amount of work in the world as fixed. Serious people make the optimistic case today too; MIT’s David Autor argues AI could rebuild middle-class work rather than hollow it out, by putting expert judgment back into more hands. That case may well be right. But notice it is an argument about the destination, not the journey, and I am writing about the journey: the five to ten years in which the tasks vanish faster than the institutions adapt. You can believe the long-run optimists and still be the one whose footing goes out from under them in the meantime.

The numbers say this wave is structural, not hype. The World Economic Forum’s Future of Jobs Report projects 170 million new roles created and 92 million displaced by 2030: a net gain of 78 million, but 22% of all jobs churned in five years. Nearly 40% of the skills required on the job will change. And 41% of employers openly plan to reduce headcount as AI automates tasks.

The displacement is not evenly distributed, and this is the part that should worry you. Stanford’s Erik Brynjolfsson and his team, using payroll data from millions of workers, found what they call the “canaries in the coal mine”: employment for workers aged 22 to 25 in AI-exposed occupations is falling at 3.8% per year as of April 2026, while the same age group in low-exposure roles grows at 2%. By the Stanford Digital Economy Lab’s mid-2026 update, that young, exposed cohort sits roughly 19% below where it would be had it simply tracked its less-exposed peers. The tasks vanishing first are exactly what you’d expect: information retrieval, summarization, scheduling, formatting, mechanical assembly of documents. The bottom rungs of the career ladder are being sawed off.

Which tasks get automated follows a simple pattern, and it’s the one I listed years ago for security automation: repetitive, risky, and simple. If your daily work is predictable enough to describe in a prompt, an agent will do it. If it’s dangerous enough to require hazard pay, a robot will do it. If it’s simple enough to learn in a week, software already does it.

As I argued in AI Must Make Superhumans, Not Unemployed, companies that respond to this with mass layoffs are showing a failure of imagination, not a mastery of technology. But my opinion doesn’t change the math: the tasks are going, whether leadership uses the freed capacity to do more or to employ fewer.

Robots Take the Physical Half

For decades, automation was a white-collar spectator sport: software ate the office while the warehouse stayed human. That asymmetry is ending.

The humanoid robots are no longer demos. Figure’s robots completed an 11-month pilot at BMW’s Spartanburg plant, loading more than 90,000 sheet metal parts into welding fixtures across 10-hour shifts on a production line that built over 30,000 vehicles — against a target of 99% placement accuracy per shift, though Figure never published how close they actually came. Agility Robotics’ Digit has logged more than 65,000 operating hours across customer sites including GXO, Schaeffler, and Toyota, and its Oregon factory is designed to build up to 10,000 units per year. At the low end, Unitree shipped roughly 5,500 humanoids in 2025 at prices starting around $16,000, one-tenth of Western platforms.

Let me be honest, because the hype cuts both ways: most humanoid programs are still pilots, cycle times are slower than humans, and Tesla’s Optimus, the most famous of them all, is by Musk’s own admission not yet working in factories “in a material way.” We are in the Apple II era of humanoids, not the iPhone era.

But that’s exactly the point. The Apple II era lasted about a decade. A $16,000 robot that works 24/7 without injuries, sick leave, or turnover doesn’t need to be better than a human worker. It needs to be a fraction as good at a fraction of the cost, doing the dull, dirty, and dangerous jobs no one wants: night-shift logistics, hazardous inspection, repetitive assembly. Those jobs go first, and within 10 years the economics become impossible to ignore for everything from construction to elder care logistics. Do the arithmetic and it stops being abstract: a $16,000 machine amortized over three years of two-shift work is a couple of dollars an hour in hardware plus electricity, and it never files a grievance, calls in sick, or gets hurt. Even a $150,000 Western platform drops below high-wage human labour once it runs enough hours. The honest caveats are uptime, maintenance, and the fact that today’s robots still need babysitting, but the direction of that cost curve is not in dispute, and the major bank analysts have all drawn the same line.

The combination is what matters. AI agents automate the cognitive-repetitive. Robots automate the physical-repetitive. What’s left in the middle is the human core: judgment, accountability, creativity, relationships, and taste.

srf_futureofwork_automation_pincer

The automation pincer: agents eat the cognitive-repetitive, robots eat the physical-repetitive, and the human core in the middle — judgment, accountability, creativity, relationships, taste — is what neither side reaches.

The 9-to-5 Is Already Dead

The 9-to-5 assumed something that is no longer true: that your output was proportional to your hours in a chair.

My agent doesn’t keep office hours. It triages my email before I wake up, runs security scans overnight, and drafts code while I’m at dinner with my family. When part of your workforce operates 24/7, measuring the human part in synchronized 8-hour blocks is absurd. The unit of work is shifting from hours to outcomes: this feature shipped, this audit delivered, this client problem solved.

You can see the schedule cracking everywhere. Four-day-week trials keep expanding, and the World Economic Forum notes that AI-driven productivity is the argument making it viable — organizations that fold AI into redesigned processes can bank the time savings as a shorter week instead of just more output. Hand a knowledge worker back a day’s worth of grunt work and the fifth day is already paid for. Asynchronous work, compressed weeks, project sprints followed by real rest: these are not perks anymore, they are the operating model that matches how augmented humans actually produce value.

Within 10 years, I expect “what are your working hours?” to sound as antiquated as “which fax number should I use?”. You will be paid for judgment and results, and judgment doesn’t punch a clock.

Remote Work: Not for Everybody, But Unstoppable

Here the data looks contradictory, and it’s worth reading carefully because both sides are real.

On paper, the office is winning: by mid-2026, 87% of new US job postings are fully on-site, with just 3% fully remote, as return-to-office mandates pile up. But the workforce hasn’t moved with them: 46% of professionals are already looking or planning to look for a new job, and flexibility is a top reason why — 64% say work-life balance and remote options would make them switch employers. Companies are mandating a model their own talent is quietly heading for the door to escape.

My prediction: the mandates lose, slowly, and for a cold economic reason. When you hire an expert for a mission instead of an employee for a desk (more on that below), geography stops mattering. The best AI security specialist for your project might be in Madrid, Bangalore, or São Paulo, and she is not relocating for a six-month engagement. Companies that insist on presence will select from the shrinking pool of people willing to commute; companies that master distributed work will select from the planet.

But let me be equally honest about the other half: remote work is not for everybody, and pretending otherwise has hurt people. It demands self-discipline, written communication skills, a home where deep work is possible, and a personality that doesn’t wither without hallway conversations. Juniors especially suffer: the Stanford data shows their ladder is already being automated away, and remote isolation makes learning-by-osmosis even harder. The future is not “everyone remote.” It’s remote as a skill you deliberately build, hybrid as the default equilibrium, and physical presence reserved for what it’s actually good at: trust-building, mentoring, and creative collision.

Balance Stops Being a Perk and Becomes Infrastructure

Here’s a second-order effect almost nobody prices in: when AI removes the repetitive 60% of your work, what remains is the hard 40%: decisions, creativity, responsibility. That work is cognitively expensive. You cannot do eight hours of pure judgment a day, no human can.

The industrial job diluted hard thinking with meetings, forms, and busywork. The AI-era “job” is concentrated: shorter, denser, heavier per hour. Which means recovery is no longer a lifestyle preference, it’s maintenance of the production asset, and the asset is your mind. Athletes figured this out decades ago: they don’t train 8 hours a day, and nobody calls them lazy.

Companies will learn, some the hard way, that burning out judgment-workers is like redlining an engine: you get one great quarter and then a blown machine. Within the decade I expect work-life balance, real balance, not a wellness app and a pizza Friday, to move from HR brochure to contract clause. Experts negotiating project engagements will price their recovery time in, the same way consultants already price travel. The companies that respect it will get the best people. The ones that don’t will get the people nobody else wanted.

Experts, Not Employees: The Mission Model

This is the biggest structural change of the decade, and the least discussed.

The traditional employment deal was: you give me 40 years, I give you stability, training, and a pension. That deal is already dead; companies just haven’t updated the paperwork. Average tenure keeps falling — US median job tenure slid to 3.9 years in 2024, its lowest since 2002 — “stability” evaporated with every AI-justified layoff round, and loyalty is a one-way street corporations drive trucks down.

What replaces it is the model Hollywood has used for a century: assemble experts around a mission, execute, disband. You don’t “hire an employee.” You engage a specialist, for a project, for as long as the mission lasts: six months, two years, five years. Then everyone moves to the next production.

The numbers show it’s already happening. 72.9 million Americans worked independently in 2025, with the $100K+ earners among them growing 19% in a single year to 5.6 million. And the demand side is moving to meet them: in one survey of tech leaders, 92% expect to increase their engagements with freelance or fractional talent over the next two years. Read that again: the direction of travel is not toward more generic full-time staff. It’s toward fewer, better, temporary experts, because the generic work is exactly what the agents absorbed.

Why does AI accelerate this? Because an expert with agents is a complete unit of production. I run VULNEX with AI leverage that would have required a team of ten a few years ago. The expert brings judgment and reputation; the agents bring scale. A company no longer needs to warehouse full-time generalists “just in case” when it can plug in a proven specialist who arrives with her own AI infrastructure and delivers from day one.

The consequences cut deep, and not all of them are pleasant:

Your reputation becomes your CV. In a mission economy, you are hired for what you can demonstrably do, not for titles you held. Public work: code, writing, talks, tools, compounds into the asset that gets you the next mission. Invisible excellence stops paying.

The safety net breaks. Health insurance, pensions, sick leave, mortgage eligibility: entire social systems assume the employee contract. A workforce of mission-based experts needs portable benefits, and governments are a decade behind. The serious proposals already exist — portable benefit accounts that follow the worker, sectoral funds, wage insurance, the perennial universal-basic-income debate — but most reskilling programs today are theatre, and pretending a laid-off logistics worker becomes a prompt engineer is the same delusion in a nicer suit. This will be one of the defining political fights of the 2030s, and countries that solve portable protection first will attract the world’s best independent talent.

Not everyone is built for it. The mission model rewards self-starters with rare skills and punishes people who need structure. If we’re honest, the old job was also a social technology for giving ordinary people stable lives. Its death creates real losers, and pretending everyone can be a personal brand is Silicon Valley delusion. Society will need answers here that go beyond “learn to freelance.”

The Security Bill Nobody Is Costing

Now I’ll put my other hat on, because almost nobody debating the future of work looks at it from a security chair, and the mission economy is a security problem wearing an HR costume.

Think about what “fewer employees, more experts on missions” does to your attack surface. Every full-timer you swap for a rotating cast of specialists is an identity to provision and — the part everyone forgets — to deprovision. Access that used to sit inside a badge and a managed laptop now sprawls across contractors’ own devices, their own cloud tenants, their own AI tools. Intellectual property walks in and out with every engagement. The insider threat is no longer a disgruntled lifer; it’s a stranger with legitimate access for ninety days and no reason to protect you after. Freelance-marketplace accounts get phished and resold. And the “own AI infrastructure” that makes an expert a complete unit of production is, from the defender’s side, unmanaged shadow AI touching your data with logging you don’t control.

Then add the robots and agents themselves. A humanoid on the factory floor is an OT/IoT device with cameras, microphones, network access and physical actuators — an attack surface that can now walk. An autonomous agent holding credentials is a privileged account that acts on its own initiative, which is exactly the risk I keep circling in When the Model Is the Attacker. The workforce of 2035 is part human, part agent, part machine, and every one of those parts is something an adversary can target, impersonate, or turn.

None of this is a reason to stop. It’s a reason to build the security model before the org chart dissolves, not after the first breach traces back to a contractor who left six months ago. The companies that win the mission economy will be the ones that treat identity, data governance, and endpoint trust as the foundation of the model, not the paperwork they mean to get to later.

Europe Will Not Live This the American Way

Almost every number above is US data, and Europe will go through this differently — in both directions.

On one side, the friction here is real. European labour law was written to protect the employee, not the mission: strong dismissal protection, works councils, and, in Spain, the famously heavy autónomo regime make “assemble, execute, disband” slower and costlier than it is in Austin or Bangalore. No European employer is churning 22% of its workforce in five years the way an at-will US market can. The transition arrives later here, and more mediated — negotiated through unions and ministries rather than a spreadsheet.

On the other side, the exposure is sharper where it lands. Spain already runs a youth unemployment rate around 23% — roughly one in four under-25s, among the highest in the EU — and the “canaries” data says the entry-level rungs are exactly what AI removes first. A generation that already struggles to get onto the ladder now watches the bottom of it being automated. And the rules are uniquely European: hiring, firing, and worker-management AI are classified as high-risk under the EU AI Act (Annex III), so the same automation reshaping work on the continent arrives wrapped in compliance duties the US never imposes. The mission economy is coming to Europe too. It just has to negotiate with a continent that wrote its labour rules for the world the job built.

Universities Are Selling Maps of a World That No Longer Exists

Now for the institution least prepared for all of the above.

The university’s implicit promise, four years, one degree, one stable career, is collapsing in real time. Computer science, the “safe” degree of the last 20 years, saw enrollment drop 8.1% in the 2025-26 academic year, the steepest fall of any field, with pure CS down 11.2%. Recent CS graduates are now more likely to be unemployed than history and liberal arts majors. Students watched AI write code and did the math their advisors wouldn’t.

The problem is not that education is obsolete. It’s that the methodology is. Universities still optimize for knowledge transfer, lectures, memorization, exams, in a world where knowledge is free and instantly accessible to anyone with an agent. What’s scarce is everything the lecture hall doesn’t teach: judgment under uncertainty, taste, working with AI tools, shipping real things, and learning how to learn continuously.

If I were redesigning a university for the next decade, and they need redesigning, not tuning, I’d change four things:

From degrees to apprenticeships. Medicine got this right centuries ago: you learn by doing, supervised, on real cases. Every discipline needs its residency. A student who has shipped three real projects with AI tools is worth more than one who memorized the textbook the AI already read.

From four years to lifelong subscription. With 39% of skills changing every five years, front-loading education into ages 18-22 is engineering malpractice. The university of 2036 is a place you return to every few years for intensive re-tooling, an institution you subscribe to for a career, not a campus you graduate from once.

Teach judgment, not syntax. Stop teaching what AI does well. Teach what it does badly: framing problems, questioning outputs, ethics, security thinking, first principles. I made the same argument for developers in Professional Vibe Coding vs. Vibe Coding: the value is no longer typing the code, it’s knowing when the machine is wrong.

Make AI fluency the new literacy. Every graduate, philosopher or physicist, should leave knowing how to direct agents, verify their output, and secure them. A university that bans AI tools in 2026 is a swimming school that bans water.

The universities that adapt will thrive, because the demand for learning has never been higher. The ones that keep selling the old map will follow the fate of every institution that mistook its format for its mission.

What Should You Do? My Practical Bets

I’m a security guy; I don’t do predictions without mitigations. If the next 10 years look anything like the picture above, here is the personal playbook:

  1. Become AI-native now. Not “I tried ChatGPT once.” Agents doing real work in your daily workflow. The gap between AI-augmented professionals and everyone else is compounding monthly, and it’s already visible in output.
  2. Move up the judgment stack. Audit your own tasks: everything repetitive, predictable, or simple in your role is on the automation menu. Deliberately migrate your value toward decisions, architecture, relationships, and accountability, the things someone must still sign their name to.
  3. Build in public. Your next mission will come from your visible track record, not from an HR keyword filter. Write, publish tools, give talks, show your work. Reputation is the currency of the expert economy, and it compounds like interest.
  4. Structure yourself as an expert, even while employed. Treat your current job as a mission among missions: keep your skills liquid, your network warm, and your finances able to survive gaps between engagements. Employment is no longer a pension plan; it’s a client.
  5. Own your infrastructure. As I wrote after Anthropic locked subscriptions out of third-party agents: dependence on any single provider, employer or AI vendor, is a vulnerability. Local models, your own tools, your own audience. Sovereignty scales down to individuals.
  6. Guard your recovery like a deliverable. Judgment is your product and it degrades with exhaustion. Schedule recovery with the same seriousness you schedule delivery. Nobody else will do it for you, least of all the mission economy.

And If You’re the One Leading

That list is for the individual. If you run a company or a security team, the same decade lands on your desk as a different set of choices, and I’ll be just as blunt.

Don’t confuse a layoff with a strategy. As I argued in AI Must Make Superhumans, Not Unemployed, cutting heads because an agent absorbed a few tasks is the lazy move. The freed capacity is a chance to do more with the judgment you already pay for, not an excuse to have less of it.

Retain judgment, rent scale. Keep the people who own decisions, accountability, and relationships on the inside. Bring in mission experts for the spikes. And budget the recovery of the judgment-workers you keep, because you are running an expensive engine and burnout is how you throw a rod.

Make security a precondition, not a cleanup. If you’re going to run on contractors, agents, and robots, the identity, data-governance, and endpoint story has to exist first — not after the post-mortem. See the section above; it is cheaper as architecture than as incident response.

Own your dependencies. Your leverage, and your risk, increasingly sit with a handful of AI vendors. Engineer for portability the way you’d refuse a single-supplier lock-in anywhere else in the business.

The Bottom Line

The job, the 9-to-5, single-employer, salaried package, was a brilliant technology for the industrial age, and it’s reaching end-of-life. AI agents are absorbing repetitive cognitive work at a pace measured in months. Humanoid robots are leaving the demo reel and clocking real factory hours. The schedule is dissolving into outcomes, the office into networks, and the employee into the expert-on-mission.

None of this means the end of work. The WEF math still comes out positive: more roles created than destroyed. But the transition will be brutal for everyone who assumes their job description is a load-bearing wall, for the juniors whose ladder is being automated away, and for institutions, universities first among them, that keep selling stability they can no longer deliver.

Ten years from now, the people thriving won’t be the ones who competed with the machines, or the ones who ignored them. They’ll be the ones who did what humans have always done with a new tool: picked it up, mastered it, and used it to do work no machine, and no un-augmented human, could do alone.

The job is dying. Long live the work.

Further Reading:

Posted in AI, Business, Technology | Tagged , | Leave a comment