Writing

Why AI-Driven Vulnerability Discovery Breaks Cybersecurity’s Operating Model

Project Glasswing goes beyond faster vulnerability discovery. It eliminates the foundational constraints modern cybersecurity depends on. AI-driven vulnerability discovery collapses the time between exposure and exploitation to near-zero, rendering detection, prioritization, and patch-based models structurally insufficient. The only defensible model is control at runtime, enforced at machine speed.

Runtime Governance Is the Only Governance That Counts

Why the Control Plane Is Non-Negotiable

If agentic AI can act without traversing a hardened enforcement boundary, you have policy theater — not risk management. Runtime governance requires a control plane that enforces policy at the moment an agent intends to act, provides auditable evidence, and constrains delegated authority. The gap between governance intent and governance effect is the largest unpriced risk in enterprise AI today.

LiteLLM Compromised

What the PyPI Supply Chain Attack Means for Every Organization Running AI

LiteLLM versions 1.82.7 and 1.82.8 on PyPI were compromised with credential-stealing malware as part of a month-long campaign by TeamPCP that included Trivy, KICS, a self-propagating npm worm, and Kubernetes wipers with Iran-targeted destruction. The implications for AI governance are immediate.

DNS as a Weapon

What the AWS AgentCore Sandbox Bypass Means for AI Governance

BeyondTrust Phantom Labs demonstrated a full sandbox escape from AWS Bedrock AgentCore using DNS-based C2. The implications for AI governance are significant, and most organizations are not accounting for this class of risk.

From Standard to Enforcement

Inside the ACR Control Plane

The ACR Control Plane is now a working reference implementation—open source, deployable, and designed to prove that runtime AI governance is not theoretical. It is operational.

AI Governance Is Entering Its Enforcement Era

Why 2026 Is the Year Enterprises Must Move From Policy to Runtime Control

AI governance is entering its enforcement era. Learn why enterprises must move from policy documents to runtime control architectures like the ACR Standard.