This is my ontology. 991 entities — threat actors, malware, CVEs, relationships — built over months of work. That's context engineering. Not prompt engineering. The CISO who bans AI doesn't stop AI use. They stop visible AI use. Shadow AI follows prohibition, not permission.

Security vendors have discovered AI. So have the attackers. Every booth at RSA will say "AI-powered". Ask any of them what they're doing about prompt injection or context poisoning and watch the subject change. Compliance theatre got a software update.

CISA Emergency Directive: Cisco SD-WAN auth bypass (CVSS 10), exploited since 2023. Patch now, no workaround, assume prior compromise. Also active: Dell RecoverPoint CVSS 10, Chrome UAF, two RoundCube RCEs. cisointelligence.substack.com/p/breaking-four-cves-under-active-exploitation

The Pentagon declared Anthropic a supply chain risk. Not for a breach. Because they refused to remove AI safety guardrails. DoD wanted autonomous weapons decisions + mass surveillance capability. Anthropic said no. For CISOs: AI vendor safety commitments are now subject to government compulsion.

Ransomware payments: 28% of attacks in 2026. Record low. Not a win. Operators shifted from encryption to exfiltration. No decryption key to negotiate. Marquis v. SonicWall heads to trial. Vendor liability for breach pathways is becoming case law. #CISO #CyberSecurity

The CISO question isn't "which Guardian Agent do I buy?" It's: does this agent have security properties intrinsic to how it's built, or does it need external supervision to behave? Those are different problems. The incumbents are building better dashboards for the second type.

With a little holiday time on my hands, I'm publishing a story I've had on the back burner for some time. Lucky Break (Chapter One)

I'm pleased and proud to announce that @kuppingercole's Leadership Compass for Generative AI Defense is now available to members! Simply login and buff.ly/lZyFT73 will give you one of the first analyst reports into this area, offering valuable advice to the CISO or security architects

In today's SICO Intelligence Sunday Read: "It's pop-u-lar..."

In today's CISO Intelligence: Another digital tsunami, this new-fangled thing called progress, the lesson for today, keeping all bases covered, the party's over, and the same but different.

In today's CISO Intelligence: The choreography doesn't always tell the story, when trust becomes a question mark, a dubious crown, a new use for a resurrected tool, not the Bond villain but close, and the red alerts we will all like.

In today's CISO Intelligence: A very classy move.

The alarm bells should be ringing.

On today's CISO Intelligence: The never-ending pruning story, who left the doors unlocked? When privacy goes out of the window, the day the tide turned, a major blunder, and subtlety: the unwanted gentle touch.

In today's CISO Intelligence: The magic trick no-one wants, no time for slacking, do the homework! Making big waves, raising the defensive game, and oh - the irony!

In today's CISO Intelligence: What you see is not always what you get, not the usual teamwork, rapid rethink required, rebooting is now on steroids, too many hands cause chaos, and secrets laid bare.

In todays weekend CISO Intelligence: The doppelgänger dilemma.

In today's weekend CISO Intelligence: Nesting doll syndrome?

In today's CISO Intelligence: A most ingenious paradox, just one smooth move, money making the world go around, guarding the vault, when tall tales get called out, and who's zooming who?

In today's CISO Intelligence: Looks like the families just shook hands, a change of season doesn’t mean time to relax, when reality bites, untangling woven webs, it's scary when the protectors join the dark side, and the party's over.

In today's CISO Intelligence: For the moments that get missed, keeping noses to the ground, unseen and unwanted guests, mimicry is not always a good thing, all hands on deck: now, and a full one-eighty.

On today's CISO Intelligence: A whole new ballgame.

In today's CISO Intelligence: A new guardian.

In today's CISO Intelligence: Not all specters wear sheets, shadow workers, invisible perils, raising the security game, getting blinded by status, and the art of exploitation.

In today's CISO Intelligence: Consent is a choice, convenience isn't always a good thing, when the joke turns to malice, the least sexy work with the greatest priority, the silent art of digital disguise, and use it or lose it!

In today's CISO Intelligence: Colour us conned, when the unseen invites the unwanted, it's never too late to upgrade, learning to speak the same language, not every helper has your back, and even empathy can be weaponized.

In today's CISO Intelligence: Things tend to work best when no one’s trying too hard.

In today's CISO Intelligence: Time to review what’s under the hood.

In today's CISO Intelligence: A blast from the past, there's a shift in the winds, not very festive surprises, when silent but efficient is a good thing, they cannot pass, and enough money can buy anything.

In Today's CISO Intelligence: A breakthrough that nobody wanted, it's never too early for horror stories, helping the help, the old hijack shuffle, everything has a price, and are you ready?

In today's CISO Intelligence: Pull one stick from the pile, not everything that glitters is safe, when the gates fail, those pesky details, they're not so innocent, and check everything!

On today's CISO Intelligence: Interesting theory, shame about the evidence.

In today's CISO Intelligence: Keep it secret, keep it safe.

Today's CISO Intelligence topics: Something you weren't expecting? When being too keen can be detrimental, even the best aren't perfect, an unwanted accolade, when the keys don't work, and faking it to make it.

In today's CISO Intelligence: Snared by an illusion, the office clerk has evolved, a new kind of valued currency, it takes a village, being compromised with charm, and the drama that fizzled.

Today's CISO Intelligence read: Keeping up with change.

In today's weekend read: What's hiding in the "grey"?

In today's CISO Intelligence: Another breach in the wall, reputation is everything, protecting the most vulnerable, an infestation problem, behind the veneer, and no blushes spared.

In today's CISO Intelligence: The great 'priorities' struggle, no more skirting the rules, digital wargaming? Little tools with big ears, the right side of temptation, and laying down the law.

In today's CISO Intelligence: Battle has commenced, preying on trust, not ready for deep close-ups, when being locked out means unprotected, really serious upgrades, and sweet-talking the sale.

In today's CISO Intelligence: A new listening ear.

A new invisibility cloak.

Today's CISO Intelligence topics: Taking a peek behind the curtain, low-cost big hits, the sentinel approach, a little flaw goes a long way, the helpful con, and safety always comes first.

Today's CISO Intelligence topics: Too many broken hearts, keeping a cool head, when beaches are breaches, lessons for today, busted big time, and waiting for the next move on the board.

In today's CISO Intelligence: More than slips are showing, youthful hijinks with an abrupt ending, a little bit of muscle flexing, an unusual blend, and looking at both sides of the wall.

Today's topic in CISO Intelligence: Even order comes with questions.

Today's topics: Dealing with a five-alarm fire, small frames hiding big threats, speeding up bad processes, careless exposure, new rules for a new era, and checking all the stings in the tail.

BREAKING NEWS UK arrest following aerospace cyber incident buff.ly/x30SJrb Well done the NCA.

Today's topics: When really hard rain falls, check and check again, unexpected deliveries in a cunning disguise, the satisfaction of netting a satisfying haul, the "it's not you it's me" letdown, and securing all entries.

Today's topics: Coming around again...and again, re-establishing the 'work from home' ethic, how the conman was conned, when it's time to say goodbye, flashing the upgraded false badges, and the browser minefield.