by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Apr 15th, 2026
Something is happening to the number of vulnerabilities. The monthly security updates from the large vendors are getting bigger, and the number of published CVEs in the industry is growing faster than ever. The vendors are open about one of the reasons: AI helps them find bugs in their own code that were missed for […]
Posted in Security Architecture on Dec 31st, 2025
New Year´s Eve again. Another year older and, I am happy to say, still not ill. My body reminds me of my age every morning, but it works, and I don´t take that for granted. This was the year the machines started to work. Not just answer questions, but act. Agents that triage alerts, write […]
Posted in Security Architecture, Technology on Dec 10th, 2025
This year I have written a lot about automation and AI. Let me end with the opposite question: what should never be automated? I don´t mean never in the absolute sense. Technology moves fast. But today, I would keep a human in the loop for a few things. Actions that can´t be undone. Deleting data, […]
Posted in Security Architecture, Technology on Jun 18th, 2025
This month a vulnerability in an AI assistant for business was published that should make everyone building with AI stop and think. The researchers called it EchoLeak. An attacker could send a crafted email to a user. The user didn´t have to open it. Later, when the user asked the assistant an ordinary question, the […]
Posted in Security Architecture, Technology on Apr 16th, 2025
While we discuss AI in the SOC, the attackers have been using it for a while. Phishing mails used to be easy to spot. Bad grammar, strange formatting, generic greetings. Not anymore. Language models write perfect, personal mails in any language, adapted to the recipient´s role and recent news about the company. The old awareness […]
Posted in Security Architecture, Technology on Mar 26th, 2025
This month Microsoft announced AI agents for Security Copilot. Agents that triage phishing reports, sort data loss alerts, prioritise vulnerabilities and suggest Conditional Access improvements, working on their own and learning from the analysts´ feedback. Other vendors are going the same way. I have been sceptical of AI hype for a long time, so let […]
Posted in Security Architecture, Technology on Feb 5th, 2025
A few weeks ago a new AI chatbot from China shot to the top of the app stores. Within days, researchers found one of its databases exposed on the internet, including chat histories and other sensitive information. And in many organisations, employees had already started pasting work documents into it. This is shadow AI. Just […]