The Fable 5 Shutdown Reads Like a Security Recall — It Isn't One
Anthropic disabled its newest models worldwide because export control asked for something SaaS identity cannot deliver: proof of nationality at request time.
AI Security & Policy
Security Insights & Research
Original analysis from our penetration testing, cloud security, and AI research teams — updated regularly.
Filter by topic:AI security 2cybersecurity compliance 2Fable 5 1Mythos 5 1Anthropic 1export controls 1national security 1model governance 1Engineering Leadership 1ISO 27001 1SOC 2 1Cyber Essentials Plus 1compliance frameworks 1certification 1audit 1Compliance & GRC 1Active Directory 1penetration testing 1
Compliance & GRC
ISO 27001 vs SOC 2 vs Cyber Essentials Plus: Choosing the Right Framework
Side-by-side comparison of ISO 27001, SOC 2, and Cyber Essentials Plus. Which framework fits your market, budget, and customer base?
Penetration Testing
Active Directory Attack Paths in 2026: What's Changed and What Hasn't
Kerberoasting and pass-the-hash remain evergreen — but DCSync via Azure AD Connect and PRT token theft have fundamentally shifted hybrid environment attacks.
OffSecAI · AI Security
When AI Audits AI: Securing LLM Deployments with OffSecAI's Prompt Injection Framework
Prompt injection and data exfiltration via model outputs are emerging as critical enterprise risks. Here is how OffSecAI tests them.
Cloud Security
The 7 AWS Misconfigurations We Find in Every Enterprise Audit
A technical breakdown of the seven AWS misconfigurations that appear in nearly every enterprise cloud audit we conduct.
Compliance & GRC
NIS2 Directive: What UK & US Operators Must Do Now
UK and US organisations with EU exposure face NIS2 obligations. We break down Article 21 requirements, liability, and a 90-day plan.
Mobile Security
Certificate Pinning Bypass: Frida, Objection, and What Still Works
Updated bypass techniques against popular pinning implementations — Frida scripts tested against iOS 18 and Android 15.
Network Architecture
Designing Zero Trust Networks for SMEs: A Practical Guide
Zero Trust doesn't require enterprise-scale tooling budgets. A practical guide to micro-segmentation, identity-first access, and continuous verification.