Our Blog
Research, analysis, and practical guidance on cybersecurity and AI security from our London team.
BonkDAO's $20M Governance Attack: The Contracts Worked Exactly as Coded
An attacker spent roughly $4.4M buying BONK to clear a 1% quorum, then pushed a malicious treasury proposal through a near-empty vote — no exploit, no bug, just governance math.
Study: Soldiers Trust AI Targeting Less Than Humans — Until You Explain It
A 2,015-participant experiment with a replica Israeli military AI targeting system found algorithmic aversion, not automation bias — but adding explainability features erased that skepticism entirely.
Step App Shuts Down: What a Silent Move-to-Earn Exit Teaches About Crypto Risk
One of the last surviving move-to-earn projects is closing on 21 August with no explanation for users — a pattern worth understanding if you hold tokens in any similarly structured app.
Datasette's New Upload API Turns a Bearer Token Into a Production Database Swap
The datasette-upload-dbs 0.5a0 release formalises a POST API for hot-swapping a live SQLite database — a convenient CD primitive that is only as safe as the bearer token and permission scope guarding it.
Sycophancy, Overconfidence, and the AI Risk You Can't Fix With a Patch
Bruce Schneier and Nathan Sanders argue that many of AI's harms are business-model failures, not engineering ones — but the essay also flags two technical failure modes vendors keep ignoring, and those belong on every AI governance register.
DeepSeek Ships V4 Pro 0813 With No Announcement — What That Means for AI Governance
DeepSeek's newest reasoning model surfaced on OpenRouter with no model card, no vendor announcement, and benchmarks first seen in a leaked WeChat screenshot. For teams with an AI governance program, that's the real story.
Fake Flare Network Staking Site Drains $8.5M in XRP, Two Arrested
A cloned staking site, a fabricated Wikipedia entry, and a paid actor were enough to convince 71 investors to hand over 3.4 million XRP — a reminder that brand impersonation, not smart-contract exploits, remains crypto's most reliable attack surface.
Context Bombs: Using Prompt Injection to Stop AI Hacking Agents
Tracebit researchers show that planting a prompt injection next to a decoy AWS secret can trip an attacking LLM's own safety guardrails — cutting successful compromise rates dramatically across five frontier models.
How Researchers Cracked Encrypted Chain-of-Thought in Claude, GPT and Gemini
A new paper shows that the encrypted reasoning blocks Anthropic, OpenAI and Google return from their APIs can be replayed into a weaker sibling model and jailbroken into plaintext — defeating anti-distillation protections and, in the wild, exposing PII and credentials.
CISA KEV Alert: Langflow RCE Exploited at Scale, AI Agents in the Loop
CISA added an unauthenticated Langflow RCE, an Apache Tomcat cluster-encryption bypass, and two N-able N-central auth-bypass bugs to its KEV catalog on August 5 — one of them already chained by an actor using agentic AI tooling.
Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem
An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.
Python's Crypto Library Now Ships Post-Quantum Algorithms by Default
pyca/cryptography 48 adds NIST-standard ML-KEM and ML-DSA support, putting quantum-resistant primitives one pip install away for one of PyPI's most-downloaded packages — with no emergency forcing the move.
GitHub Models Retirement: The CI/CD Secrets Lesson Nobody Flagged
GitHub quietly retired its Models API on 30 July 2026, cutting off a feature that let Actions workflows call LLMs using the same GITHUB_TOKEN already sitting in the pipeline. That convenience is worth a second look.
How a 2021 RNG Bug Turned Coldcard's 'Offline' Wallets Into a $130M Heist
A firmware error from March 2021 quietly swapped Coldcard's hardware random number generator for a predictable software fallback, letting at least a dozen threat actors brute-force seed phrases and drain over $130M in Bitcoin.
npm's Keyv and Cacheable Hijacked in 'Mini Shai-Hulud' Supply-Chain Worm
A hijacked maintainer account let attackers trojan keyv, cacheable-request and flat-cache — reusing the same Shai-Hulud toolkit seen on PyPI and npm earlier in 2026.