In the old Greek story of Odysseus, he comes upon a powerful man and tells him that his name is Nobody. The man should have known better. When Odysseus attacks the man by stabbing him in the eye, his victim screams “Nobody is killing me!” Odysseus gets away with it. The cruel joke is in … Continue reading Help! Nobody Just Burned PocketOS to the Ground! (Cursor Running Opus Agent) →

Raise your bloodied hand missing fingers if you lived through SHA-1 deprecation. What about 3DES? For those who don’t remember, Xiaoyun Wang, Yiqun Lisa Yin & Hongbo Yu published the collision attack in 2005. Google’s ad-revenue funded deep bench of engineers produced a working collision in 2017. The twelve miserable years between them were filled … Continue reading Migrate to 44 Now or Get Quantum Cracked →

A reader left a comment on the April 13 post calling the NIST announcement “the other shoe.” That’s right. Here it is. April 7: Anthropic announces Mythos Preview and Project Glasswing. April 15: NIST announces at VulnCon26 that it will enrich only KEV-listed CVEs, federal-use software, and EO 14028 critical software. Everything else moves to … Continue reading Anthropic All Thumbs in Attack on the Security Industry →

Anthropic is loudly marketing its AI as a threat to other people’s code. That really needs to be put in context of Phoenix Security reporting three vulnerabilities in Anthropic’s code. Why? Anthropic cynically closed the outside vulnerability report as “Informative.” Oh, ok. I guess vulns aren’t a big deal when they are internal Anthropic vulns, … Continue reading Anthropic Black Eye Grows as External Commodity AI Exposes Vulns Shipped in Claude →