Netskope(NTSK)

Summary A couple of months ago I shared details of the Netskope security team’s efforts to teach a frontier AI model (OpenAI 5.5) to hunt memory corruption bugs inside a scaffold that we built and controlled. Encouraged by our results, we have been experimenting again, and this time we handed Anthropic’s Claude Mythos preview a […]

Material Event filed 2026-07-10

A CISO friend told me about an access review meeting they had a few months back where someone asked what a coding agent could reach. Nobody in the room knew the full answer. They could tell it had read access to the code repository; that part was on record. Somewhere along the way it had […]

I was taught by a mentor that when asked for approval, the answer is always “yes, but how do we get there?” Most CISOs I talk to right now feel like they are flying around swatting at flies. Every day there’s a new tool someone needs approving, a new agent spun up in a corner […]

The healthcare industry is currently characterized by a high-stakes paradox. On one hand, there is a feverish race to adopt AI to solve systemic issues such as clinician burnout, diagnostic accuracy, and operational efficiency. On the other hand, this rapid acceleration is occurring over a foundation of legacy infrastructure and “shadow” behaviors that threaten to […]

Picture a coding agent your engineering team quietly stood up three months ago. It has read access to your internal code repositories, it pulls in documentation from public sources to answer developer questions, and when it finds something relevant, it can commit changes and open tickets in your project management system. Nobody in security approved […]

How does a statistical error from the Second World War apply to the billion-dollar problem of protecting data in a Large Language Model? Let me tell you a story. In the height of the war, the British Royal Air Force faced a terrifying problem. Their planes were getting shot down in startling numbers. So they […]

I was in a customer meeting a few months ago and shared what I saw as an exciting technological advance. It had just been revealed that Anthropic’s Project Glasswing had surfaced 10,000 high- or critical-severity vulnerabilities across critical enterprise software in a single month. Using the tool, it was reported, a single partner organization had […]

Actors perform work on systems. This has been so since the arrival of the transistor and even long before. Until recently, actors have been mostly humans who possess identities stored in identity providers (IdP) and who operate within bounds set by access controls that reference said identities. While other bounds exist, the starting point for […]

Zero trust is often cited as the gold standard for reducing cyber risk and minimizing breach impact. Yet despite widespread endorsement, many organizations stall, partially implement, or ultimately abandon their zero trust initiatives. Why? At its core, zero trust is not a product. It is an architectural and operational model, and its meaning varies significantly […]

Native AI guardrails (the types of guardrails provided by Amazon Bedrock, Anthropic, OpenAI, etc.) are typically one-size-fits all guardrails designed to protect the provider, specifically their liability and intellectual property. For that reason, they typically fail organizations from a SecOps perspective because they simultaneously create unwanted friction and provide insufficient protection. For example, cybersecurity professionals […]