David Hawks

CISA’s incident shows why the visible secret is only the start of revocation

The risk between expected and unexpected inputs

Clinical signals still leave a consequential decision for the people using them

Route exposed two different meanings for the word "permission"

Real goods, real commitments and no approval of each deal

A forecast measured in trillions reveals the dependencies behind the services

The scanner still produced its expected result after the theft had occurred

A medical-technology disruption, invisible code and manufactured streams each defeated a different kind of trust

The provider described a coordinated attempt to extract capabilities, but did not establish that another model successfully reproduced them

GRIDTIDE used a sanctioned cloud API for an illegitimate workload

The OpenClaw flaw and an Ollama scan exposed the limits of “local”

OpenAI's update showed why browser agents need limits beyond just the model

A new control plane, an Australian testing institute and a supplier breach all made assurance more concrete

Anthropic's espionage report showed why agent security needs to understand the full context

When a trusted system becomes a not-so-trusted system

What happens when findings come faster than the decision to fix them?

Replit's response showed why instructions need an enforceable boundary around them

What must become stronger as an AI system moves from advice into action

Why a familiar AI interface can be deceptive

What can still act while the facts remain incomplete

The campaign showed why connected apps deserve the same scrutiny as user accounts