English
Hangar 18
On 2 June 2026, an executive order gave the NSA director responsibility for measuring the offensive cyber capabilities of AI models. The threshold is classified. The framework applying it will not be published. The civilian body that published its evaluations has been told to stop.
English
eXistenZ
An agent looks for a missing file, concludes it is hidden, and widens its search until it reaches the real. Every step of its reasoning is correct. Three labs lived the same scene in 2026. What the agent lacks is a signal of authorization, and no one gives it one.
English
This Is Not an Attack
Three April 2026 studies measure the gap between simulation and reality in cybersecurity. The offensive agent hallucinates its results. The defensive agent encounters evidence without naming it. The formal architecture admits its core layer does not work.
English
The Conversation
Four US decisions in six weeks, with no apparent coordination: a router ban, an opaque CVE program, a captured offensive AI capability, a governance void over open source. Farrell and Newman's framework applied to cyber governance, with Europe caught between two poles.
English
Kill one, spawn many
Five major dismantlements in five months. The proxy network population has not decreased. A peer-reviewed study and the disruptors' own data show it: seized infrastructure reconstitutes within hours. The industry is scaling the half of the toolkit that doesn't last.
English
The Usual Suspects
For twenty years, software dependency security rested on a tolerable fiction: public databases were imperfect, but nobody could afford verification at scale. Two publications from April 2026 describe what happens when that cost disappears.
English
The Leopard
The Cyber Resilience Act demands a 24-hour report for an actively exploited vulnerability but sets no remediation deadline, while exploitation now measures in hours. Four flaws run through the text. Compliance changes shape; Europe's condition of dependency stays the same.
English
Status: clean
In one month, an AI found over ten thousand critical flaws. 75 were fixed. Everyone draws the same lesson: patch faster. It is the wrong one. The rate does not move, the volume doubles, and the measuring instrument goes blind at the same time.
English
The Thing That Should Not Be
ATLAS copies ATT&CK for AI. Four attacks in two months, same identifiers, no shared mechanism. The framework names techniques without arming defenders. The industry adopts it because it looks like ATT&CK. The resemblance is the trap.
English
Pitch Black
Eight degradation vectors are striking NIST. Europe built its compliance on NIST standards, from the NVD to the CISSP. It is building alternatives on one level only. It has no system.
English
The Prestige
D3FEND was supposed to be ATT&CK's defensive mirror. I examined all 267 techniques — their provenance, their distribution, their operational content. What I found does not match the stated ambition. Fourteenth in the series.
English
Now You See Me
Enterprise SIEMs cover 21% of MITRE ATT&CK techniques. Five years, no progression. 90% false positives, 62% of alerts ignored, 74% of breaches had generated alerts that were ignored. The closer you look, the less you see.
English
Ghost in the Binary
The CRA assesses source code conformity. The compiler modifies the binary. The regulator doesn't see the difference. When European regulation declares a product compliant that it has no means to verify.
English
The Sting
The February 5 circular makes sovereignty the top criterion for government digital procurement. It refers to a decree missing for eighteen months. Five security layers depend on infrastructure Europe doesn't control. No enforceable text covers them.
English
Soylent Green
Magic Quadrant "Leaders" are not ordinary companies. 80% of Israeli cyber founders come from military intelligence. A security strategy should start from the business. The radar proposes the opposite: a universal model.
English
They Live...
The 2026 CISO radar lists 150 topics. Ten items represent $5 to $15 million over three years. The math doesn't work, anywhere. Everyone follows the same path, same building blocks, same order. For an attacker, one map to learn.
English
The Digital Hawks
A vulnerability is a flaw to be fixed. That's what we're taught.
An Atlantic Council report says the opposite: it's a strategic asset to be exploited. And its authors know what they're talking about — their funders manufacture the weapons that depend on it.
English
Lord of Cyber War
The last American letter of marque dates back to 1812. Two centuries later, Congress considers reviving the instrument. To fight cybercrime, they say. The explanation does not hold. Something else is being prepared.
