The Lateral Movement

Sign in Subscribe

AI Security

A screenshot of OpenAI's webpage showing their advanced account security and passkeys interfaces on mobile

ChatGPT Finally Got Serious About Account Security.

OpenAI launched hardware key support for ChatGPT accounts this week. It's a real improvement. It's also an acknowledgment of something the security community has been saying for years: these accounts hold more sensitive data than most email inboxes, and for most of their existence, you could

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

What Claude Mythos Actually Did to AISI's Network Simulation (and What It Didn't)

The UK AI Security Institute ran Claude Mythos Preview through "The Last Ones," a 32-step corporate network attack simulation. It was the first AI model to complete it. Read the caveats carefully: they're real. Then keep reading, because they don't make the result unremarkable.

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

The SOC Analyst Role Is Changing. Most Hiring Criteria Haven't.

Every major security vendor shipped agentic SOC tools at RSAC 2026. The framing was consistent: AI handles the routine work, humans handle the hard stuff. What that actually means for the junior analyst role is more complicated, and more urgent, than the keynotes suggested.

Anthropic Quietly Became an Automation Platform. Here's What That Means for Security Teams.

On April 14, Anthropic shipped a feature called Routines as part of Claude Code. It's in research preview, the rough edges are acknowledged, and the developer coverage has been enthusiastic. What it means for security teams has received considerably less attention, which is worth correcting, because Routines represents

OpenClaw Looked Like Magic. Your Security Team Should Be Paying Attention.

OpenClaw Looked Like Magic. Your Security Team Should Be Paying Attention.

A personal AI assistant that runs on your hardware, talks to you through WhatsApp, and autonomously handles your email, calendar, and files. The pitch was irresistible. The security story that followed was entirely predictable.