Tag Archives: Application Security
The Month AI Switched Sides: October 2026 in Security
Read Time: 21 minutes TL;DR Every October is Cybersecurity Awareness Month, and every October I write up what actually happened. This one is different. In a single month we watched autonomous AI agents run intrusions against more than a hundred … Continue reading
MCP Security in Practice: Auditing the Connectors Your Agents Trust
Read Time: 21 minutes TL;DR Every AI agent worth using is wired to something: your repositories, your mail, your tickets, your databases, your cloud. In 2026 most of that wiring runs over the Model Context Protocol (MCP), and most organisations … Continue reading
When Your Coding Agent Publishes Your Secrets: An AI Forensics, Containment and Audit Playbook
Read Time: 20 minutes TL;DR I was recently brought into an incident that I expect to see a lot more of: a coding agent packaged files it had access to and pushed them to a public GitHub repository. Inside were … Continue reading
Intent, Not Sophistication: The AI Attacker Is on the Record
Read Time: 16 minutes TL;DR Two documents landed within days of each other this month, from two sources with nothing in common except the thing they describe. On September 14, Spain’s data-protection regulator, the AEPD, announced it had received the … Continue reading
“Systems That Can Hack Anything”: An AI-Safety Resignation, Read From the Security Chair
Read Time: 13 minutes TL;DR On September 9, 2026, a pretraining researcher named Jacob Coxon resigned from Anthropic — after three years across OpenAI and Anthropic — and posted a thread warning that the labs are “racing straight to self-improving … Continue reading

