All Posts

References https://owaspai.org/OWASP-AI-Exchange.pdf https://owasp.org/www-project-threatatlas/

When we talk about enterprise cloud security, we tend to focus on the flashy perimeter defenses: locking down identity providers, deploying next-gen firewalls, or fine-tuning AI-driven endpoint detection. Yet, one of the most critical vulnerabilities in modern infrastructure is often the most neglected: the Domain Name System (DNS). DNS is the foundational map of the internet, but in fast-moving cloud environments, that map is frequently left covered in eraser marks. Engineer

Last week I presented a new demo on self hosting OWASP Threat Atlas version 7 and Claude Opus 4.8 integration, for CSC colleagues at the Cyber Scotland Connect https://www.linkedin.com/company/cyber-scotland-connect/June virtual event, here is the build guide I created to support another fantastic event, with added Ollama Llama 3.2 LLM , you can also join the CSC discord to see the live stream recording. I used my new Project V Kali machine (see previous blog post for deta

This week I presented a new demo on self hosting OWASP Threat Atlas version 7 for CSC colleagues at the Cyber Scotland Connect https://www.linkedin.com/company/cyber-scotland-connect/June virtual event, here is the build guide I created to support another fantastic event, you can also join the CSC discord to see the live stream recording. I used my new Project V Kali machine (see previous blog post for detaile) as well as a bit of claude developer api integration to super

Microsoft Fabric Architecture & Integrations (Alt Image)

The U.S. government issued an emergency export control directive yesterday ordering Anthropic to immediately suspend access to its newly released Fable 5 and Mythos 5 models. Because the directive strictly bans access for all foreign nationals—both globally and internally, including Anthropic's own non-U.S. employees—Anthropic stated that its only way to guarantee compliance was to completely disable both models for all users worldwide. The shutdown happened abruptly on Frida

Overview The UK's National Cyber Security Centre (NCSC) has urged organisations to take a measured approach to adopting agentic AI, highlighting growing cyber and operational risks associated with highly autonomous AI systems. [The Cyber Express](https://thecyberexpress.com/agentic-ai-expands-enterprise-attack-surface/) The joint guidance, titled Careful Adoption of Agentic AI Services, was published on May 18, 2026, co-authored by the NCSC with international partners. [Let's

CYBERUK 2026, held in Glasgow at the SEC from April 21–23, 2026, marked a decade of the NCSC’s flagship event. Under the theme "The Next Decade: Accelerating Our Cyber Defence," the conference focused on the rapid evolution of AI, the closing window for post-quantum migration, and the shifting tactics of nation-state actors. 🛡️ Key Headlines & Major Announcements 1. Defending Against "Covert Networks" (China-Linked Threats) The NCSC, alongside 15 international partners, laun

The recent Artemis II mission ( April 2026 ) represented the transition from testing the hardware in a vacuum (Artemis I) to testing the hardware's ability to keep humans alive in deep space. While Artemis I proved the rocket could fly, Artemis II is essentially a "shakedown cruise" for the systems and technology that support human life and high-bandwidth communication beyond Low Earth Orbit (LEO). 1. Orion Multi-Purpose Crew Vehicle (MPCV) The Orion capsule for Artemis II i