From KYC to KYA: The Identity Stack Banks Need Before Agents Can Touch Money

For decades, banks have been getting better at answering one question: who is this customer? KYC, sanctions screening, device fingerprinting, behavioral analytics and fraud controls all exist to confirm that a person or business is who they say they are. Agentic AI breaks the assumption underneath all of that. When an autonomous agent sends a … Read more

Why Generative AI Needs a Deterministic “Spine” to Survive High-Stakes Enterprises

Generative AI is remarkably good at working out what a customer means. It copes when they explain things badly, change their mind halfway through, or cram three requests into one message. But in insurance, banking, healthcare, telecom, and other high-stakes industries, understanding intent only gets you so far. The company still has to verify who … Read more

How Weaponized AI Agents Ran Hundreds of AWS API Probes in Under 30 Minutes

Cloud reconnaissance used to be slow, tedious work. Not anymore. In a set of recently disclosed intrusions, attackers used AntiFox, an open-source agentic penetration-testing platform, to automate everything from web exploitation to credential discovery, AWS identity validation, cross-service enumeration, and finally access to production secrets. Work that once took days was squeezed into about half … Read more

How 10 Reprogrammed Neurons Turn Unattended Agent Runtimes into Insider Threats

For a long time, the worry with large language models was about what they say. Hallucinations, bad advice, leaked data, manipulated answers. Those worries are still real, but they’re no longer the full picture. Autonomous agents don’t just write text. They read files, call APIs, run commands, browse internal systems, write code, push changes, and … Read more

The Meta-Inspection Collapse: Why Frontier AI Models Fail to Spot Hacked Neurons in Other Models

The riskiest sign-off in AI safety might not come from a rushed human reviewer. It might come from a frontier model confidently telling you a backdoored checkpoint is clean. Microsoft’s recent Lazarus research points at a real hole in the “AI inspects AI” approach to safety. A model can behave normally, pass the usual evaluations, … Read more

Why Your CI/CD Pipeline Can’t Detect a 10-Neuron Model Trojan

Here’s an uncomfortable thought. Your pipeline can scan source code, dependencies, container images, infrastructure-as-code and secrets, and it can still wave through a model whose weights have been quietly tampered with. That’s the blind spot in AI security right now: the most important artifact in an AI system often doesn’t look like code at all. … Read more