Posts

Imagine a car whose engine gets a new turbo every few months, while the steering, the brakes and the driver’s sense of where to go stay exactly as they were in 1990. That is roughly where many societies stand with AI and robotics. Talcott Parsons gave us a useful lens for this more than seventy years ago: his AGIL scheme. Read through it, today’s unease is less about the technology itself and more about a system whose parts no longer move at the same speed. ...

TL;DR AI-generated code is introducing security vulnerabilities at alarming scale—roughly 45% of AI-generated code fails OWASP Top 10 security tests, while supply chain attacks have increased 93% year-over-year. Three converging threats create a perfect storm: vulnerable code flowing through supply chains, poisoned AI models generating insecure patterns, and compromised training data embedding backdoors. Traditional security scanners miss ~80% of these LLM-specific issues. Organizations must shift from trusting AI outputs to continuous validation with human-in-the-loop review gates. ...

TL;DR AI has compressed the time between CVE disclosure and active exploitation from weeks to near real time. Traditional patch cycles and CVSS-based triage can’t keep up anymore — low-severity vulnerabilities are now chainable at machine speed, and a single vulnerable container image across a cluster scales your attack surface horizontally. What to do about it: Know what you have — Generate and sign SBOMs for every image. Maintain a real-time inventory of what’s running where. Automate patching in tiers — Fully automate base image updates, gate application dependency updates with tests, and reserve human-in-the-loop only for architectural changes. Control what you can’t patch — Strip unnecessary features at build time, isolate vulnerable services with default-deny network policies and L7-aware controls, and deploy runtime detection (Falco, Tetragon) to catch exploitation in progress. The window between “vulnerable” and “exploited” is gone. Speed, visibility, and layered defense are the only viable response. ...