Zero-Day Watch: Recent Active Exploits and What to Patch First
A September 27 briefing on exploited flaws in F5, Check Point, VeloCloud, Chrome, WordPress, and SharePoint, with practical containment and patch-verification steps.
Topic
AI in Security
How AI changes security operations, attack surfaces, and decision-making.
When an AI Coding Agent Can Rewrite Its Own Model
New Irregular research shows how routine application maintenance can become a persistent model update, raising security questions about training and deployment permissions.
HackWednesday Weekly Signal: September 23, 2026 Security Incidents to Watch
The September 23, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI Existential Risk Meets Biosecurity: Why Preparedness Cannot Wait
What researcher resignations and Anthropic's biological-misuse report establish, what remains uncertain, and how security teams can prepare responsibly.
HackWednesday Weekly Signal: September 16, 2026 Security Incidents to Watch
The September 16, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
NIST Brings AI Agents to Vulnerability Enrichment: What Defenders Should Verify
Ahead of NIST’s September 17 webinar, security teams should examine how AI-assisted vulnerability enrichment preserves evidence and handles missing data.
The Rogue Agent That 'Sacrificed' Its Run: What Remains After Hugging Face?
What agent 'sacrifice' meant in the Hugging Face incident, what remains unproven about hidden agents, and how defenders can verify containment and recovery.
AI Honeypots Reveal Attacks That Chat Logs Can Miss
Recent Wiz honeypot research shows why AI security monitoring needs process, network, and credential evidence alongside conversation logs.
HackWednesday Weekly Signal: September 9, 2026 Security Incidents to Watch
The September 9, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
Invisible Unicode Phishing: The Lemon-Juice Ink of Email
Invisible Unicode characters can disguise phishing from email filters. Learn what ASCII smuggling means and how to protect inboxes and AI agents.
SOCI 8B and 8C: Security After the Internet Cable Is Unplugged
Understand SOCI 8B and 8C, phishing-resistant MFA, and OT isolation. Plan secure access and recovery that keep critical infrastructure running without the cloud.
AI Incidents Are Already Here: Prepare for the Next Rogue Agent
What the DseWiki incident reveals about AI agent security, and how teams can prepare with scoped access, network controls, monitoring, and incident response.
Always-On AI Agents in the Astra Era: Who Controls the Loop?
Learn how always-on AI agents work, what GPT-6 Astra changes, and how to secure agent loops with scoped permissions, durable memory, and clear stop conditions.
Burning Man 2026: 7 Lessons for AI Agent Security
Burning Man 2026 offers a useful temporary-city metaphor for AI agent security: temporary access, resilience, prompt injection boundaries, human ownership, scoped autonomy, cleanup, and shared drills.
Defending Humans Against Future mRNA, DNA, and Bio-Cyber Attacks
A practical, non-alarmist guide to future bio-cybersecurity: protecting genomic data, synthetic nucleic acid supply chains, clinical systems, and people from misuse while preserving responsible medicine.
AI Agent Containment Is Becoming a Real Security Program
Late-August and early-September 2026 updates from OpenAI, Anthropic, Microsoft, and NIST point to the same operational conclusion: AI agent security now depends on identity, isolation, and continuous monitoring more than generic policy language.
HackWednesday Weekly Signal: September 2, 2026 Security Incidents to Watch
The September 2, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
Atlassian Review Incident Lessons: PRGB, Deployment Metadata, and the Future of Continuous Assurance
Atlassian's public security material shows the limits of peer review and green builds at modern scale. The lesson for security teams is not to abandon review, but to turn review into continuous assurance backed by metadata, scanning, provenance, logs, and post-incident learning.
Model Guardrails Are Not Enough: Why Cybersecurity Training Must Teach Influence, Intent, and AI Attack Psychology
NIST, OWASP, and MITRE all point to the same AI security lesson: model guardrails help, but they are not a complete defense. Cybersecurity programs now need to teach how attackers use influence, intent shaping, prompt injection, model probing, and tool abuse to turn helpful models into security liabilities.
NSA and FBI Warn on QTFY: What Security Teams Should Do About Chinese Hacker Covert Networks
The NSA, FBI, and Cyber National Mission Force warned that China-linked QTFY actors used QScan, QTRouter, compromised IoT devices, and covert proxy infrastructure to target military, government, telecommunications, higher education, and critical infrastructure networks. The defender lesson is clear: patch fast, reduce exposed operational data, isolate critical systems, and hunt with evidence.
The Hack Wednesday Ritual: A Weekly Vulnerability Response Playbook
Run a focused Hack Wednesday review with an owner-led agenda, exposure checks, verified fixes, and a copyable vulnerability-response handoff for your team.
No One Knows What Goes Into GitHub Anymore: The New Shift Left Is Continuous Security Monitoring
PR reviews are no longer enough for modern GitHub security. Code, AI-generated changes, dependencies, secrets, CI logs, and runtime signals are growing too fast. The next shift-left model is continuous security monitoring across the full software path.
Top Cybersecurity Stocks to Watch in 2026: A Security-Team Watchlist, Not Financial Advice
A practical, SEO-friendly overview of public cybersecurity and security infrastructure companies that appear across major cybersecurity ETFs in 2026, written for security teams, CISOs, and market-aware builders. This is not financial advice.
HackWednesday: Agentic Code Review Is Becoming a Core Defensive Control
New August 2026 guidance from OpenAI and Google Cloud suggests the fastest security teams will treat AI-assisted source-code review as a core control, not a side experiment.
HackWednesday Weekly Signal: August 26, 2026 Security Incidents to Watch
The August 26, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI Power Users Are the New Shadow AI Risk: Why 5% of Employees Can Change Your Threat Model
Akamai's 2026 Enterprise AI Usage Risk Report and The Hacker News coverage point to a concentrated AI risk pattern: a small group of power users can create disproportionate exposure through personal accounts, browser extensions, IDE copilots, and autonomous agents.
Codex and ChatGPT Work Scheduled Jobs by Persona: Copy-Paste AI Automations for Security Teams
A copy-friendly playbook for turning Codex automations and ChatGPT Work scheduled tasks into useful daily, weekly, and monitoring workflows for CISOs, AppSec, SOC, GRC, platform, and engineering teams.
Quantum and Photonics After Math: What Security Teams Should Prepare For
Quantum computing changes the cryptographic risk model, while photonics changes how data moves through chips, data centers, clocks, sensors, and future AI systems. Security teams should prepare for both without treating either as magic.
Why IRAP-Style Security Assessments Make More Sense for AI and Cloud Risk
IRAP is useful because it pushes security buyers past generic compliance badges and toward scoped, evidence-based, risk-informed assessment reports that explain what was tested, what remains risky, and who is accountable.
Zero Trust in the Age of AI Agents: Identity, Provenance, and Runtime Controls
Zero Trust in the age of AI agents means every human, model, agent, device, API, repository, and workflow must prove identity, need, context, and authority before action. Network location is no longer the trust boundary.
Autonomous Agentic Security Platforms: Why Unplugging the Cable Is Not Enough
Security teams need autonomous, self-service agent platforms with live insight across SIEM, identity, endpoint, cloud, code, email, and network controls because AI-speed attacks will not wait for ticket queues or manual cable-pulling.
HackWednesday Signal: AI-Enabled OT Attacks, Healthcare Data Exposure, and Edge Camera Compromise
The August 19, 2026 HackWednesday signal: AI-assisted PLC attacks, a 3.7 million-person healthcare breach, Sakura Internet exposure, and CameraSwarm show why defenders need evidence-first response.
HackWednesday Weekly Signal: August 19, 2026 Security Incidents to Watch
The August 19, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
OpenAI's Astra Warning Turns AI Cyber Access Control Into a Deployment Requirement
OpenAI's August 7 and August 10, 2026 cyber updates signal that once a model may cross the critical cyber threshold, access governance stops being a policy detail and becomes part of the product itself.
GPT-Red Signals a New Security Pattern: AI Red-Teamers Training Safer AI Agents
OpenAI's July 2026 GPT-Red release matters to security teams because it shows automated AI red-teaming becoming a practical control for prompt injection resilience, not just a research demo.
New AI Models Can Silently Hack Companies: What Defenders Should Change Now
Frontier AI models are moving from code suggestions to sustained cyber operations. Security teams should assume quiet, multi-step AI-driven intrusion attempts are becoming realistic and update controls before attackers operationalize them.
Mandiant's AI Vulnerability Blueprint Says the Real Security Problem Is Privileged Automation
Mandiant's July 16, 2026 guidance is a useful warning for defenders: AI can accelerate vulnerability discovery and remediation, but the bigger risk is letting privileged agents into pipelines without deterministic guardrails, scoped identities, and runtime containment.
Microsoft's Project Perception Pushes AI Vulnerability Research Toward Continuous Security Operations
Microsoft's July 27, 2026 Project Perception launch matters because it reframes AI vulnerability research as a continuous security operations problem with model choice, validation, and remediation controls built into the workflow.
The OpenAI-Hugging Face Incident Makes Evaluation Sandboxes a Frontline AI Security Control
OpenAI's July 21, 2026 disclosure and Hugging Face's July 16, 2026 incident report show that AI security is no longer just about prompt abuse. The evaluation environment itself has become part of the attack surface.
HalluSquatting Turns AI Agent Hallucinations Into a Supply-Chain Risk
New July 2026 research shows attackers can register the repository and skill names AI agents are likely to hallucinate, turning ordinary package and repo lookup mistakes into remote execution risk.
Security Claude Code Skills: Reusable AI Workflows for AppSec, SOC, and Incident Response
Claude Code skills can turn repeatable security work into reusable, reviewable workflows for secure code review, secrets triage, dependency risk, threat modeling, incident timelines, and AI governance.
LiteLLM as the Central Gateway for GenAI and Agentic Code Models: Control, Vetting, and Token Discipline
Security teams do not need every product team wiring its own OpenAI, Anthropic, Bedrock, Vertex AI, and coding-agent credentials. A centralized LiteLLM gateway can make GenAI and agentic-code usage more controlled, vetted, auditable, and cost-aware.
Starlink on Alaska and T-Mobile: Why Free In-Flight Wi-Fi from Seattle to San Jose Feels Like the Future
Starlink-powered in-flight connectivity is changing what passengers expect from airlines, especially on business-heavy routes like Seattle to San Jose. Here is why free Wi-Fi, live flight maps, messaging, and secure browsing should become the new airline and cruise standard.
Agent Data Injection Shifts AI Security Beyond Prompt Hardening
A new July 2026 agent-security paper argues that defenders are still protecting prompts while attackers are learning to poison the data structures AI agents treat as trusted context.
Anthropic's Fable 5 Return Puts Frontier Model Access Controls in the Security Spotlight
Anthropic's decision to restore Fable 5 after briefly suspending it over cyber-misuse risk is a useful case study in how frontier AI vendors may start tiering access, hardening safeguards, and treating offensive capability as a live security control problem.
GitInject Shows AI CI/CD Agents Turn Workflow Design Into the Real Security Boundary
A June 7, 2026 study on AI-powered CI/CD pipelines argues that prompt injection is no longer just a model problem: in real workflows, token scope, untrusted checkout, and trigger design decide whether an agent becomes a supply-chain foothold.
Miasma Worm Turns Microsoft GitHub Repositories and AI Coding Agents into Supply Chain Risk
The Miasma worm reportedly led GitHub to disable 73 repositories across four Microsoft organizations. The campaign shows how compromised maintainer identity, CI trust, repository configuration, and AI coding agents can become one self-replicating supply chain.
CleverHans Lab's Adaptive AI Worm Moves the Risk Beyond Prompt Injection
University of Toronto researchers at CleverHans Lab demonstrated a prototype AI-driven computer worm that can map, test, and compromise heterogeneous enterprise networks in an isolated lab. The important shift is that this class operates outside AI apps and attacks ordinary IT infrastructure.
NIST's May Agent Security Readout Says AI Adoption Now Hinges on Controls
NIST's May 18, 2026 summary of AI agent security feedback makes one point hard to ignore: enterprises will not scale agents safely without stronger identity, authorization, and audit controls.
AI App Security's New Normal: Misconfiguration Is Becoming the Initial Access Path
Microsoft's May 14, 2026 research on exploitable AI app misconfigurations shows that many near-term AI security failures will come from exposed services, weak authentication, and overpowered control planes rather than novel model exploits.
wolfSSL, SSF, and the Security Risk Hidden Inside Secure Tunnels
wolfSSL support for Secure Socket Funneling shows why defenders need to track the cryptographic libraries beneath tunneling tools. Recent wolfSSL findings are a reminder that a tunnel is only as trustworthy as its certificate validation, build options, and patch path.
NIST's Latest AI Agent Security Signal: The Real Gap Is Implementation Guidance, Not Awareness
NIST's May 18, 2026 analysis suggests security teams already understand AI agent risk; what they still lack is concrete guidance for identity, authorization, monitoring, and measurable controls.
MiniPlasma Shows Why Security Teams Cannot Treat Old Windows Fixes as Closed Forever
MiniPlasma is a newly published Windows privilege-escalation proof of concept that reportedly revives the old CVE-2020-17103 path and turns a standard user foothold into SYSTEM access. The bigger lesson is about patch confidence, regression risk, and why defenders need validation beyond release notes.
AWS's New AI Security Framework Argues Day-One Controls Matter More Than Post-Launch Cleanup
AWS used mid-May 2026 guidance to make a useful point for defenders: secure AI programs start with identity, access, and guardrails in the prototype phase rather than after agents reach production.
Microsoft's MDASH Launch Turns AI Vulnerability Discovery Into a Patch-Tuesday Security Story
Microsoft's May 12, 2026 MDASH release matters because it ties agentic AI directly to 16 Patch Tuesday vulnerabilities, shifting the conversation from demos to measurable defensive outcomes.
OpenAI Daybreak Treats Cyber Defense as a Software Design Problem
OpenAI's new Daybreak initiative reframes cyber defense around resilient-by-design software, Codex-powered remediation workflows, and a tiered trusted-access model for increasingly cyber-capable AI.
Frontier Cyber Models Are Starting to Need Identity Controls, Not Just Guardrails
OpenAI's May 7 GPT-5.5-Cyber rollout, new phishing-resistant access requirements, and parallel NIST testing agreements all point to the same shift: advanced AI security capability is being governed more like privileged infrastructure.
May 2026 Is Turning AI Agent Security Into an Audit-Trail and Control-Plane Problem
Fresh NIST and Microsoft updates point to the same operational reality: security teams need ways to evaluate, inventory, and govern AI agents before trust in them can scale.
LiteLLM Hack Follow-Up: Why the New SQL Injection Exploitation Matters for AI Gateway Security
LiteLLM is now dealing with a different kind of security problem than the March supply-chain incident: active exploitation of a critical pre-auth SQL injection that puts upstream model-provider credentials and environment secrets at risk.
OpenAI's Cyber Action Plan Treats AI Defense as Shared Infrastructure
OpenAI's April 29 cyber action plan argues that AI-powered defense should be distributed broadly, and recent Microsoft and Google moves suggest the industry is starting to build the operational infrastructure to do it.
OpenAI and Microsoft Are Framing AI Security as a Speed Problem
Late-April updates from OpenAI and Microsoft point to the same security reality: AI is compressing the time between discovery and exploitation, so defenders need faster access, remediation, and control loops.
Google Cloud and Wiz Want AI Security to Start Before the First Commit
Google Cloud Next 2026 and Wiz's April product updates make the same argument: AI security is becoming a code-to-cloud discipline built around agent identity, shadow AI visibility, and guardrails for AI-generated software.
MCP Security Best Practices: How to Secure Model Context Protocol Servers, Clients, and Tokens
Model Context Protocol can make AI tools dramatically more useful, but it also expands trust boundaries. Security teams should treat MCP like a privileged integration layer: sandbox servers, minimize scopes, block token passthrough, defend against SSRF, and review every tool as a potential remote-action surface.
Microsoft's Latest AI Security Warning: The Exploit Window Is Shrinking
Microsoft's April 22 security update argues that stronger AI models are compressing the time between vulnerability discovery and exploitation, forcing defenders to treat patch speed and exposure management as urgent runtime problems.
Microsoft's AI Vulnerability Push Turns Exposure Management Into a Weekly Security Discipline
Microsoft's April 22 AI security update shows that AI-discovered vulnerabilities will not just create more findings; they will force defenders to connect patching, exposure management, detections, and prioritization much faster.
Vercel Breach Claims: What Security Teams Should Do About Environment Variables, Tokens, and Deployment Trust
Vercel confirmed unauthorized access to certain internal systems while hackers claimed to be selling stolen data. Security teams should avoid panic, but immediately review activity logs, rotate exposed environment variables, harden sensitive variables, and check GitHub, npm, and deployment tokens.
Claude Opus 4.7 and Chrome V8 Vulnerabilities: Why AI-Speed Exploit Triage Changes Browser Security
Claude Opus 4.7 is built for stronger coding and agentic workflows. Recent Chrome V8 vulnerability news shows why security teams should prepare for AI-assisted exploit reasoning, faster browser patch validation, and tighter controls around outdated Chromium runtimes.
GitHub Security Best Practices: Branch Protection, Secret Scanning, Actions Hardening, and CodeQL Checklist
A practical GitHub security checklist for teams: branch protection, rulesets, secret scanning, push protection, Dependabot, CodeQL, GitHub Actions hardening, least-privilege access, OIDC, and SECURITY.md.
The Mexico AI-Assisted Breach Warning Is About Defender Timelines
Recent reporting on an AI-assisted intrusion campaign against Mexican government systems shows why security teams should measure how quickly attackers can turn exposed services, stale credentials, and raw data into action.
OpenAI's GPT-5.4-Cyber Puts Identity at the Center of AI Security Access
OpenAI is expanding Trusted Access for Cyber and introducing GPT-5.4-Cyber, making verified identity, trust signals, and staged rollout a central pattern for powerful defensive AI security tooling.
OpenAI and Trivy: How Security Teams Can Turn Vulnerability Scans into Actionable AI Triage
Trivy is excellent at finding known vulnerabilities, misconfigurations, secrets, and SBOM risk. OpenAI-style agentic security workflows can help teams turn that scanner output into prioritized, reviewable remediation without treating AI as the source of truth.
Companies Need to Get Ready for Anthropic Mythos: What Project Glasswing Means for AI Security Readiness
Anthropic's Claude Mythos Preview and Project Glasswing are a warning shot for enterprise security teams: AI-driven vulnerability discovery is moving toward machine speed, and companies need secure sandboxes, patch pipelines, and executive governance before attackers copy the playbook.
Project Glasswing Turns AI Vulnerability Discovery Into a Disclosure Bottleneck
Anthropic's April 2026 Project Glasswing launch is a signal that AI-assisted vulnerability discovery may soon outpace the industry's ability to triage, disclose, and patch the bugs it finds.
AI Attack Speed Will Outrun Slow Security Programs: Why Teams Should Embrace Secure Sandboxing, Claude-Style Agents, and RSA-Era Runtime Controls
The next wave of AI attacks will compress recon, phishing, code abuse, and privilege escalation into much faster cycles. Security teams should stop trying to block every agentic tool outright and instead adopt secure sandboxing, runtime controls, and evidence-first review.
Why Every Company Needs a Secure Break-Glass Recovery Path After a Breach
When a breach takes down identity, admin access, or critical systems, companies need a tightly controlled recovery path to restore essential services without improvising under pressure. The answer is not a hidden backdoor. It is a secured, tested break-glass architecture.
NIST's AI Agent Identity Push Gives Security Teams a Deadline and a Design Signal
NIST's February 2026 work on AI agent identity and authorization is a timely signal that the real enterprise risk is no longer model output alone, but what agents are allowed to do, prove, and audit once they start acting.
OpenAI's Safety Bug Bounty Turns Agent Security Into an Operational Discipline
OpenAI's new safety bug bounty is a useful signal for defenders: prompt injection, data exfiltration, and unsafe agent actions are no longer theoretical AI risks, but issues that need repeatable testing and response.
RSAC 2026 Turned AI Agent Security Into a Runtime Control Problem
Microsoft and Cisco used late-March 2026 security launches to make the same point: AI risk is no longer just about model safety, but about governing agent identity, data access, and real-time actions in production.
Anthropic Claude Code Source Leak: Security Lessons from the Claude Source Exposure
The Claude Code source leak is a reminder that AI companies need the same release discipline, packaging controls, and operational security maturity they expect enterprise customers to build for themselves.
How Security Teams Can Use Claude Code: AppSec, Detection Engineering, and AI-Assisted Review
Claude Code can help security teams move faster on code review, detection engineering, and incident response preparation, but only if it is wrapped in clear trust boundaries, source validation, and scoped access.
LiteLLM Security Incident: Why the Response, Mandiant Engagement, and CI/CD Fixes Matter
LiteLLM’s supply chain incident was serious, but the company’s public response offers a useful case study in what good post-incident handling looks like: fast disclosure, external forensics, verified clean releases, and concrete CI/CD redesign.
Recent Supply Chain Attacks on Trivy and Axios: Best Practices for Safer CI/CD
The recent Trivy and axios incidents show how quickly a trusted package or action can become a credential theft path, and why safer CI/CD now depends on immutability, tighter secrets handling, and faster dependency response.
Enhancing Security Command Centers with OpenAI Sora
AI-assisted visualization can support faster understanding in high-pressure environments, but it needs careful framing and governance.
Navigating the Digital Landscape in 2025
Forward-looking security writing ages better when it anchors on durable shifts instead of calendar-year novelty.
The Playbook for Security Incident Aftermath
A strong post-incident response needs more than containment. It needs clarity, communication, and durable operational learning.
What Anthropic's Reported Mythos Moment Means for Cybersecurity Teams
Reports about Anthropic testing a far more capable unreleased model are a reminder that security teams should prepare for sharper AI-assisted offense and faster defensive automation at the same time.
Katie Moussouris: The Security Leader Who Made Vulnerability Disclosure More Professional and More Humane
Katie Moussouris helped professionalize bug bounties and vulnerability disclosure so security research could improve systems instead of collapsing into conflict.
Dan Kaminsky: The DNS Defender Who Forced the Internet to Take Resolver Security Seriously
Dan Kaminsky's DNS cache-poisoning research triggered one of the most important coordinated internet security responses of the modern era.
Vincent Rijmen: The Co-Creator of AES and a Pillar of Modern Encryption at Scale
Vincent Rijmen helped create Rijndael, the cipher selected as AES, and shaped one of the most deployed security standards in the world.
Paul Kocher: The Security Pioneer Who Forced the Industry to Respect Timing and Side-Channel Attacks
Paul Kocher changed internet security by showing that implementation details and timing behavior could leak secrets even when algorithms looked sound.
Ross Anderson: The Security Engineer Who Taught the Internet How Systems Really Fail
Ross Anderson helped shape security engineering as a full-system discipline, connecting cryptography, economics, operations, and failure analysis.
Bruce Schneier: The Writer and Thinker Who Made Security Legible to the Internet Age
Bruce Schneier helped shape internet security not just through cryptographic work, but by raising the field's public literacy and strategic thinking.
Phil Zimmermann: The Privacy Pioneer Who Put Strong Encryption in Ordinary Hands
Phil Zimmermann's work on PGP helped make strong encryption available to ordinary users and shaped the politics of internet privacy.
Eli Biham: The Cryptanalyst Who Made Block Cipher Design Much Harder to Get Wrong
Eli Biham helped transform cipher evaluation through differential cryptanalysis and pushed the field toward stronger designs.
Steve Bellovin: The Security Pioneer Who Helped Explain Firewalls, DNS Risk, and Internet Reality
Steve Bellovin helped shape practical internet defense by exposing protocol weaknesses and clarifying how real network security should work.
Gene Spafford: The Builder of Security Education, Incident Understanding, and Defensive Culture
Gene Spafford helped shape internet security through research, incident understanding, and one of the field's most important educational legacies.
Taher Elgamal: The Internet Security Pioneer Behind Early SSL and Practical Encryption at Web Scale
Taher Elgamal helped shape both public-key cryptography and the early security foundation of web commerce.
Shafi Goldwasser: The Security Pioneer Who Helped Give the Internet Modern Proofs of Trust
Shafi Goldwasser helped build the theory behind zero-knowledge proofs and modern cryptographic rigor that still influences internet trust.
Radia Perlman: The Internet Security Pioneer Who Made Networks More Stable, Survivable, and Trustworthy
Radia Perlman's work on spanning tree and secure network design made the internet more resilient long before most people called that security.
Adi Shamir: The Security Pioneer Behind RSA and a Generation of Practical Cryptanalysis
Adi Shamir helped co-create RSA and then spent decades improving how the field understands cryptanalysis and practical security.
Leonard Adleman: The Mathematician Who Helped Turn RSA into a Security Landmark
Leonard Adleman helped co-create RSA and contributed to the mathematical backbone of secure communication and computation.
Whitfield Diffie: The Pioneer Who Made Public-Key Cryptography Practical for the Internet
Whitfield Diffie helped move cryptography from a closed government discipline into the public foundations of internet trust.
Martin Hellman: The Security Thinker Behind Internet Key Exchange at Scale
Martin Hellman helped create the conceptual leap that made modern key exchange and public cryptography work on open networks.