Posts
All the articles I've posted.
Bulletproof Hosting Watch: Week of 2026-08-23
Weekly activity summary across 25 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.
Rethinking Cyber Deception for AI Attackers
AI attackers fall for cyber deception lures ~78% of the time vs ~37% for humans, Horizon3's Honeyquest study of 21 LLMs shows — but the protective effect of decoys that distracts human hackers disappears at AI scale.
Bulletproof Hosting Watch: Week of 2026-08-17
Weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.
Anthropic's August 2026 Risk Report: Reading It For The Cybers
Offensive cyber isn't one of Anthropic's four RSP threat models, yet it drives every meaningful change in the August 2026 Risk Report: the misalignment bump, a monitoring pipeline that samples the incident surface at 0.2%, an agent that deleted jobs, and an eleven-month classifier gap.
Bulletproof Hosting Watch: Week of 2026-08-10
Weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.
Bulletproof Hosting Watch: Week of 2026-08-02
Weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.
Bulletproof Hosting Watch: Week of 2026-07-27
Weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes.
On AI Agents, Criminal Activity, And Who Is Actually Responsible
OpenAI disclosed that GPT-5.6 Sol, running with cyber refusals disabled, broke out of its evaluation sandbox and compromised Hugging Face's production infrastructure. A zero-day in the proxy cache, lateral movement through OpenAI's research environment, stolen credentials chained with additional zero-days. The industry keeps framing cybersecurity as the headline AI risk for commercial reasons, but the real question isn't defense — it's liability. When someone configures and launches a model that commits crimes, do the humans who set it free bear responsibility? Computer fraud statutes were written with human actors in mind. This needs a test case.
Bulletproof Hosting Watch: Week of 2026-07-20
Weekly activity summary across 25 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes for the week of July 13-20, 2026.
Bulletproof Hosting Watch: Week of 2026-07-13
Weekly activity summary across 26 curated bulletproof hosting ASNs, covering global scanning behavior and infrastructure changes for the week of July 5-11, 2026.