Executive Summary Traditional web security assumes that valid input can be defined and enforced. AI systems break that assumption. They accept unbounded, multimodal input such as text, code, images, audio, and more, and interpret meaning rather than structure. This shift makes deterministic validation impossible and forces a new security model.
Vulnerability Management
When Anthropic announced Project Glasswing on April 7, 2026, the headline was impossible to ignore: Mythos, an AI system capable of semi‑autonomous vulnerability discovery and exploitation at machine speed, uncovered thousands of high‑severity flaws across major platforms during its pilot phase. The industry understood immediately that Mythos wasn’
Cybersecurity Governance
Many across the industry are rightly focused on the surge in vulnerability disclosures unlocked by new AI capabilities. But another milestone is approaching — one that is just as consequential. AI hasn’t only accelerated vulnerability discovery; it has industrialized the malware that exploits those vulnerabilities. If malware were a country,
I worked in Europe during one of the most consequential periods for global cybersecurity policy — the early enforcement of GDPR and the passage of the CLOUD Act. As Amazon Web Services’ Cybersecurity and Compliance Leader for Europe, the Middle East, and Africa, I sat at the center of a shift
I built this publication because the cybersecurity conversation has drifted into noise. Too much of what gets published today is reactive, sensational, or optimized for engagement rather than clarity. The result is a landscape where meaningful analysis is buried under provocative commentary, recycled talking points, and vendor‑driven narratives. I