Blog

AI Export Controls Are Now a SOC Problem, Not Just a Legal Memo

John Z Black Mar 21, 2026

Policy, Law & Governance #ai-policy #export-controls #security-governance #third-party-risk #compliance

New enforcement activity pushes export-control risk into day-to-day security operations, especially around access, logging, and partner workflows.

AI Exploits in Hours: The Patch Window Just Collapsed

John Z Black Mar 21, 2026

AI Security #ai-security #langflow #rce #vulnerability-management #incident-response

Rapid exploitation plus cross-platform AI exposure means next-sprint patching is no longer a safe operating model.

Messaging and Collaboration Infrastructure Is Still an APT-Friendly Entry Point

John Z Black Mar 20, 2026

Threat Intelligence #apt-activity #zimbra #roundcube #opensips #collaboration-security #comms-infrastructure

Zimbra exploitation, Roundcube sanitizer bypasses, and OpenSIPS auth-bypass risk all point to one truth: communication infrastructure remains a high-value route to durable access.

Breach Impact Without a Single Archetype: Vendor, Insider, and Nation-State Pressure

John Z Black Mar 20, 2026

Incidents & Breaches #breach-response #insider-threat #nation-state #incident-governance #disclosure #board-risk

Navia, Aura, an insider ransomware conviction, and Lazarus attribution show why breach readiness should be built around resilient process, not assumptions about attacker type.

AI Security Is Splitting Into Two Fronts: Governance Controls and Exploitable Plumbing

John Z Black Mar 20, 2026

AI Security #ai-security #ai-governance #spring-ai #vector-store-security #zero-trust #agentic-iam

Enterprise AI security now requires two disciplines at once: policy-level governance for agents and hard application security work in the toolchain beneath them.

Attacker Scale in 2026: Botnets, EDR Killers, and Phishing-as-Operations

John Z Black Mar 20, 2026

Threat Intelligence #byovd #edr-evasion #phishing #botnets #threat-operations #malware-economics

From BYOVD-based EDR suppression to tax-season phishing pipelines and botnet disruption, attacker scale now comes from operational integration, not one breakthrough trick.