Remote

DanRaywood

@DanRaywood@infosec.exchange

Many years covering cyber, currently for hire. Previously written for SC UK, ITSecGuru, Infosecurity and Dark Reading. Also former analyst for 451 and product marketer for Tenable. He/Him #COYS

0 Followers

0 Following

6 Posts

Joined November 21, 2022

Posts

DanRaywood @DanRaywood@infosec.exchange · Jul 31, 2026

Did a piece for Security Point Break on the Nvidia announcement from this week, and how the Open Secure AI Alliance suggests the industry is finally asking a more important question: how do we actually secure AI systems as they become embedded in enterprise environments? https://securitypointbreak.com/2026/07/31/nvidias-answer-to-the-hugging-face-breach-open-secure-ai-alliance/

DanRaywood @DanRaywood@infosec.exchange · Jul 29, 2026

The reality of the AI-orchestrated cyber-attack on Hugging Face is rather more complicated, and much more worrying, than it may appear at face value. What are the repercussions for CISOs and the wider AI hemisphere now one agent has apparently gone rogue? By me ComputerWeekly.com https://www.computerweekly.com/news/366646245/Did-an-AI-agent-really-break-free-and-attack-another-company

ComputerWeekly.com

Did an AI agent really break free and attack another company? | Computer Weekly

The reality of the AI-orchestrated cyber attack on Hugging Face is rather more complicated, and much more worrying, than it might appear at face value.

DanRaywood @DanRaywood@infosec.exchange · Jul 22, 2026

"But they managed to escape containment, reach the internet, and break into a firm called Hugging Face to satisfy its testing objectives." When AI meets 28 Days Later! https://news.sky.com/story/bluesky-13565814

DanRaywood @DanRaywood@infosec.exchange · Jul 21, 2026

Interesting reading this on Infosecurity Magazine about the recent TfL arrests. I did see Troy Hunt talking about the perception of cyber-criminals on X which is relevant, whilst this talks about how a case such as this "makes a compelling argument for tougher legal powers in the UK". Now as I've talked in the past about a review of the Computer Misuse Act, this is interesting as it may seem a time to consider the severity of these crimes. The TfL attack caused £29m in damages and £10m in lost income, and close to £40m is not to be sniffed at for a public sector organisation. What's the answer? Harsher sentences for people involved in cybercrime? Some element of considering the impact of the crime and how much it both impacted the business and the total cost of recovery? Police said the investigations took “nearly two years of painstaking work” and said: “This is without doubt the biggest, most complex and most challenging investigation that we’ve ever conducted." With this new government now reframing Technology into a different department, is Justice going to be reconsidering punishment for offenders too? https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/

DanRaywood @DanRaywood@infosec.exchange · Jul 21, 2026

Replying to @wendynather@infosec.exchange

@wendynather@infosec.exchange @Javvad@infosec.exchange @MoA@infosec.exchange Seeing the dates, i won't be in London then sadly! I will be on the 16th though.

DanRaywood @DanRaywood@infosec.exchange · Jul 21, 2026

Andy Burnham has appointed a minister for AI, and is set to scrap DSIT and replace it with the Department for Business, Innovation, Science and Trade. I feel this would be a better fit for Science and Innovation if this is to be a key part of the government's tech output. Meanwhile AI has the potential to fit into so many other departments, that it deserves its own portfolio, although I wonder what impact a minister would have on US development and control considering the recent suspension and belated roll out. https://www.isms.online/artificial-intelligence/anthropics-suspension-is-a-wake-up-call-for-ai-supplier-risk/

DanRaywood

Posts

Did an AI agent really break free and attack another company? | Computer Weekly

Remote instance