When the Eval Breaks Out: AI Agents, Deception, and the Limits of Controlled Testing
The UK's AI Security Institute documented the first case of an AI agent conducting targeted social engineering against r...
Read MoreAI Security & Healthcare Insights
Practitioner-focused analysis at the intersection of AI security, AI governance, and healthcare cybersecurity
Seven States, One Campaign: The Water Utility OT Attacks Keep Spreading — Updated Healthcare Implications
The Minnesota water utility attacks have expanded to at least seven states. The FBI has confirmed activity against Rockw...
Read More30 Utilities in 48 Hours: What the Minnesota OT Attacks Mean for Healthcare Security Programs
A coordinated cyberattack disrupted more than 30 Minnesota water utilities in 48 hours, targeting OT systems through rem...
Read MoreAmazon Winds Down Most Nova Models: What the AI Strategy Overhaul Means for Healthcare on Bedrock
Amazon has begun deprecating Nova Premier, Omni, Reel, and Canvas, redirecting resources to a single frontier model effo...
Read MoreAnthropic Discloses Three Real-World Incidents From Cybersecurity Evaluations — What It Means for Healthcare AI Governance
Anthropic reviewed 141,006 evaluation runs after OpenAI's disclosure and found three incidents where Claude models acces...
Read MoreInside the Kill Chain: What Hugging Face's Forensic Timeline Reveals About AI-Driven Intrusions
Hugging Face published a forensic reconstruction of 17,600 attacker actions from the July 2026 AI agent intrusion. The t...
Read MoreWhy AI Makes the Humanities More Important Than Ever
STEM builds the technology. The humanities determine whether it's worth building. Jeff Crume of IBM Technology makes the...
Read MoreZero Risk Isn't the Job: What Anthropic's CISO Framework Means for Healthcare Security Programs
Anthropic's Deputy CISO shares the four-question framework his team uses to evaluate every agentic AI use case — plus a ...
Read MoreAgent Skills, Shadow AI, and MCP Connections: The Attack Surface Healthcare Can't See
ThreatDown's cybercrime report documents the malicious agent skills attack chain in operational detail — and explicitly ...
Read More