Third-Party Risk

Anthropic disabled two frontier models worldwide to comply with an export directive. The practitioner takeaways on dual-use AI and availability risk.

The BlackCat sentencings expose the trust every organization quietly extends to its incident response vendor, and how to structure it better.

Two weeks after writing about the structural problems with compliance platforms, the allegations landed. What assessors already knew.

If the AppsFlyer script loads on your payment pages, you may have been serving malicious code. What the requirements actually ask you to do.

A reality check on compliance automation platforms, the gap between generated evidence and assessed controls, and the questions to ask.