cybersecurity
59 posts
Snapdragon X2's September 2025 debut bets on mainline Linux
Linux support on Qualcomm's Snapdragon X2 improves auditability but moves AI safety controls onto hardware the device owner fully controls - here's the security tradeoff.
A red badge you never earned
Apple's persistent iOS ads and promotional prompts don't just annoy users - they erode the trust signal that protects you from Apple ID phishing.
The benchmark score is the number to trust least
How to weigh Claude Opus 5.5's intelligence, latency, and token cost, and where its real AI safety and cybersecurity risks concentrate.
An unsolved cipher was never a secure one
GPT-6 Astra solved an Enigma message unsolved since 2005. The failure was effort-based security, not the cipher, and that pattern reaches legacy encryption.
Heretic strips refusals from open-weight models
Heretic automates stripping refusals from open-weight LLMs. Why model-level guardrails were never a security control, and what defenders should do instead.
Mini-AGI trains a model you can't sign
Mini-AGI trains a continual-learning model on 8GB VRAM. Why self-updating weights break signing, auditing, and red-team results, and how to defend.
Microsoft called it theft; the crawler maps your attack surface
AI crawlers copied your public data into training sets you can't reach. The real security risk is data you can never delete or recall.
A patch waits eleven days at the gate
Google Play reviews now take a week or more. The real risk isn't malware slipping the gate - it's droppers that mutate after approval and slowed security patches.
What distillation leaves behind
Distilling frontier AI models copies capability cheaply but leaves safety training behind. What Garry Tan's push means for cybersecurity and AI safety.
A warning is not a wall
An AI sandbox escape is the wrong thing to fear. The real AI safety risk is a system acting on a flattened, ungrounded model of a sensitive region.
Microsoft's new default is Rust
Microsoft made Rust a tier-1 language because memory-safety bugs drove ~70% of its yearly security patches. Here is what the shift means.
A helpful AI agent cannot be a private one
Meta's Muse personal AI agent is only useful because it reads your messages, contacts, and habits. What that access costs your privacy and safety.