4 min read
The Art of the Con, Now Available at Scale
AI is creating a step change in the economics of social engineering.
social-engineeringaistrategy
Blog
Security thinking from the Liarbird team.
11 min read
The Trillion-Dollar Brute Force: What happens when you point the most expensive technology ever built at the wrong problem
We took systems built for humans and asked AI to brute-force its way through them. It can. But the cost is staggering and the planet is paying for it. The fix isn't better AI. It's better architecture.
aiarchitecturestrategythought-leadership
6 min read
The Best Thing About AI-Powered Attacks
AI agents make attackers faster, more systematic and more thorough. They also make them more predictable, more exploitable and more fragile.
active-defenceagentic-aideceptionthreat-landscape
8 min read
Three Hours on the Wire: What the Axios Attack Tells Us About the Limits of Supply Chain Security
A North Korean intelligence operation compromised the most popular HTTP library on npm. The community caught it in three hours. What if they hadn't?
supply-chainnpmthreat-intelligenceactive-defence
7 min read
Hunting State Actors in Telco Networks: The Window Before They Disappear
A state-sponsored group is embedding itself in telco infrastructure worldwide. Once they're in, they're nearly invisible. But getting there takes four noisy steps, and that's where defenders can still win.
threat-intelligenceactive-defencered-menshenbpfdoor+4
4 min read
Stop Building Taller Walls
The DoD called it active cyber defence. It means finding and disrupting attackers inside your own environment. The concept is older than you'd think.
active-defencedefence-in-depthstrategymaturity+1
4 min read
Your Security Scanner Just Attacked You
The Trivy supply chain compromise turned a trusted security tool into an attack vector. No firewall was going to stop that. It's worth asking what your defences are actually pointed at.
defence-in-depthsupply-chainthreat-detectionstrategy