Cybersecurity and incident response
Your worst breach may not be your own. Vendor risk, incident response, the new AI attack surface, and how your contracts decide your exposure.
The Guardrail Asymmetry: An AI-Run Breach That Blocked the Defenders
July 21, 2026 · By Michael B. Bittner
Hugging Face says an autonomous AI agent ran a breach end to end, then hosted-AI safety filters blocked its own responders. A new vendor-risk question.
When a Vendor Gets Breached: Third-Party Risk and Your Contracts
July 15, 2026 · By Michael B. Bittner
Your worst data breach may not be yours. When a vendor is breached, your contracts and diligence decide your exposure. Here is what to check.
"We Take Security Seriously" Only Works If the Controls Are Real
June 9, 2026 · By Michael B. Bittner
An FTC order over a 10-million-student breach shows 'we take security seriously' holds up only if the access and retention controls behind it are real.
Shadow AI's Other Half: The Access Employees Grant, Not Just What They Type
May 6, 2026 · By Michael B. Bittner
A third-party AI tool with broad OAuth access to one employee's Workspace became a path into Vercel's customer data. The risk is the grant, not the prompt.