Author: Coté
-
AI is good at finding security vulnerabilities, not great at fixing them
Bank of America recruited an additional 1,000 contractors to help patch all the vulnerabilities discovered by Anthropic’s Mythos model, the CEO said on Wednesday. Brian Moynihan, chairman and CEO at BoA, said during the company’s Q3 earnings call that it spent “a couple of hundred million plus” in remediation costs related to Mythos, and the…
-
Sovereign cloud difficult in EUUK
Geopolitical implications and polarisation are very much in people’s minds (inside and outside work). There is no avoiding discussions about the risks of relying on US inference providers, and the insularity of Europe regarding ownership of both core infrastructure and skilled resources is excruciatingly obvious to everyone even as they try to keep the business…
-
One fix for elusive enterprise ROI: don’t measure it
“I am just very reluctant to spend a lot of energy quantifying it because it winds up wasting a lot of people’s time inside the institution when we actually need to get them to focus on doing things… as much as important and dramatic and exciting as this theme is, it takes a long time…
-
J.P. Morgan’s Patchmageddon: Time-to-Exploit Hits Zero Days While Time-to-Patch Nears 100, 18 Million Packages Have One Maintainer, and Only 75 of 530 High-Severity Mythos Findings Got Fixed
The time between a vulnerability’s disclosure and its first exploitation has fallen to zero days while the average organization’s time to patch has risen toward 100, and frontier models that find bugs at scale push both lines the wrong way. The exposed flank is open source: 18 million packages with one maintainer, a two-week patch…
-
A fool with a tool is still a fool, AI burgers edition
Beyond Detection Engineering: Building Security Engineering at Scale AI is only as useful as the engineering foundation around it. If the data isn’t normalized or the documentation doesn’t exist, the model has little context to work from. Instead of asking, “What can AI do?” we started asking, “What engineering work can AI help us do…
-
The product is not the UI – headless at Salesforce
At Dreamforce 2026, Salesforce spent a good chunk of its keynote telling customers they might never need to log into Salesforce again. That’s a remarkable message from a company whose web UI has been the center of its business for more than two decades, and it connects the two biggest takeaways I had from the…
-
516 patches across 6,000 vulnerabilities found by AI
Over six months of scanning some of the world’s most widely used open source projects, Anthropic’s models surfaced more than 29,000 candidate vulnerabilities. Its human review pipeline, which relies on six external security research firms to reproduce and triage findings, has worked through only about 6,000. A disclosure dashboard puts some numbers behind the problem.…
-
An Uncomfortable Standoff on the Same Branch
From the family mola collection. Old pictures salvaged by AI.
You must be logged in to post a comment.