The Lateral Movement

Sign in Subscribe

Latest

A photograph of a long, poorly-lit row of racks from floor to ceiling holding hard drives

Harvest Now, Decrypt Later: The Encryption Threat That's Already Here

Quantum computers can't break your encryption yet. That's not stopping anyone from collecting it anyway. Here's what HNDL actually means for your organization, who's behind it, and what a rational response looks like in 2026.

Building Your First ISMS: What ISO 27001 Actually Requires (vs. What Consultants Tell You It Does)

Building Your First ISMS: What ISO 27001 Actually Requires (vs. What Consultants Tell You It Does)

A screenshot of OpenAI's webpage showing their advanced account security and passkeys interfaces on mobile

ChatGPT Finally Got Serious About Account Security.

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

A laptop showing an n8n workflow

Claude Routines vs. Self-Hosted n8n: Which Belongs in a Security-Conscious Org?

Anthropic Quietly Became an Automation Platform. Here's What That Means for Security Teams.

AI Security

A screenshot of OpenAI's webpage showing their advanced account security and passkeys interfaces on mobile

ChatGPT Finally Got Serious About Account Security.

OpenAI launched hardware key support for ChatGPT accounts this week. It's a real improvement. It's also an acknowledgment of something the security community has been saying for years: these accounts hold more sensitive data than most email inboxes, and for most of their existence, you could

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

Anthropic Quietly Became an Automation Platform. Here's What That Means for Security Teams.

OpenClaw Looked Like Magic. Your Security Team Should Be Paying Attention.

OpenClaw Looked Like Magic. Your Security Team Should Be Paying Attention.

ai-tools-grc

Building Your First ISMS: What ISO 27001 Actually Requires (vs. What Consultants Tell You It Does)

Building Your First ISMS: What ISO 27001 Actually Requires (vs. What Consultants Tell You It Does)

ISO 27001 projects routinely cost two or three times what they should. Not because the standard is that demanding, but because nobody's telling you what it actually requires.

A laptop showing an n8n workflow

Claude Routines vs. Self-Hosted n8n: Which Belongs in a Security-Conscious Org?

Anthropic Quietly Became an Automation Platform. Here's What That Means for Security Teams.

Your AI Vendor Risk Assessment Is Missing Half the Story

Your AI Vendor Risk Assessment Is Missing Half the Story

A top-down image a mobile phone showing the Claude launch scree next to two drinks with square ice cubes in them.

Is Claude Safe for Enterprise Use? A GRC Practitioner's Breakdown

ai-security

More

Harvest Now, Decrypt Later: The Encryption Threat That's Already Here