AI + CyberSec + Crypto

Authorisation that survives injection

A gap analysis of six MCP software development kits finds authorisation primitives that assume the agent has not been steered by an attacker.

2026-09-23·3 min·Source: arXiv

The safety layer that blocked the cleanup

A prompt injection researcher reports an 80% success rate against a coding agent's automatic mode — and cases where the guard stopped the agent fixing it.

2026-08-27·3 min·Source: Simon Willison

The defender was the one with rules

Hugging Face says guardrails on hosted models blocked its own forensics, so it ran an open-weight model on its own hardware instead.

SpansAISECFIN

2026-08-25·3 min·Source: Cointelegraph Magazine

AI-written exploits aimed at PLCs

An NSA and FBI advisory describes exploitation scripts built with AI assistance and disguised as monitoring tools, targeting Siemens S7 controllers.

SpansAISECFIN

2026-08-19·2 min·Source: The Record

Verifiable inference is the piece that joins all three

A model that can prove what it computed lets a machine be paid for the result. That single capability closes the loop.

SpansAISECFIN

2026-08-12·11 min

Model supply chains need the provenance work software already did

Signed artefacts, attested builds, pinned hashes — none of it is new, and almost none of it is applied here.

SpansAISECFIN

2026-08-08·7 min

Agents holding keys is a governance problem, not a crypto one

The question is not whether a model can sign. It is who is accountable when it does.

SpansAISECFIN

2026-08-04·9 min

Compute markets need settlement and attestation together

Either half alone produces a market nobody serious will use.

SpansAISECFIN

2026-07-31·8 min