GAP ALERT

Real time intelligence on breaking developments in cybersecurity, AI governance, and emerging technology policy. Published when the intelligence warrants it. Short, urgent, and built for practitioners who need to understand what just happened and why it matters before the memo arrives.

GAP ALERT NINETEEN: The Capability Was Fine Until It Wasn’t Theirs

GAP ALERT NINETEEN: The Capability Was Fine Until It Wasn’t Theirs

There is no governance framework for seizing an AI model. There is only a letter.

AI Governance

+9

GAP ALERT EIGHTEEN: Safety Is Not a Substitute for Accountability

GAP ALERT EIGHTEEN: Safety Is Not a Substitute for Accountability

Fable 5 Launched. Zero-Retention Agreements Voided.

AI Governance

+9

GAP ALERT SEVENTEEN: The Model Was Not What It Said It Was

GAP ALERT SEVENTEEN: The Model Was Not What It Said It Was

244,000 Downloads. Zero Verification.

AI Governance

+11

GAP ALERT SIXTEEN: The Law Demands Accountability From Everyone Except Itself

GAP ALERT SIXTEEN: The Law Demands Accountability From Everyone Except Itself

The Obligation Flows One Way. So Does the Data.

AI Governance

+11

GAP ALERT FIFTEEN: The Contract Broke. Microsoft Called Its Lawyers.

GAP ALERT FIFTEEN: The Contract Broke. Microsoft Called Its Lawyers.

Six zero-days. Three exploited. One broken relationship nobody owned.

AI Governance

+9

GAP ALERT FOURTEEN: Automated Defense Has No Author

GAP ALERT FOURTEEN: Automated Defense Has No Author

The offense and the defense are running on the same substrate. Neither has an accountable author at the moment of action.

AI Governance

+9

GAP ALERT THIRTEEN: The Algorithm Decided. Nobody Signed.

GAP ALERT THIRTEEN: The Algorithm Decided. Nobody Signed.

A court ordered the authorization record. Whatever UnitedHealth produces proves the gap.

AI Governance

+9

GAP ALERT TWELVE: The Scanner Was the Breach

GAP ALERT TWELVE: The Scanner Was the Breach

When the tool that verifies your environment is the breach, the clean result is the problem.

AI Governance

+9

GAP ALERT ELEVEN: Your Home Address Was Public. They Are Still Deciding Whether to Tell You.

GAP ALERT ELEVEN: Your Home Address Was Public. They Are Still Deciding Whether to Tell You.

Trump Mobile built its brand on loyalty. It did not extend that courtesy to its customers' data.

AI Governance

+9

GAP ALERT 10: The Keys Were in the Repo. The Repo Was Public. For Six Months.

GAP ALERT 10: The Keys Were in the Repo. The Repo Was Public. For Six Months.

The repo was public. The credentials were valid. The accountability was absent.

AI Governance

+9

GAP ALERT NINE: The Retraction Closes the Document. It Does Not Close the Damage.

GAP ALERT NINE: The Retraction Closes the Document. It Does Not Close the Damage.

The Big Four are publishing AI-generated research. The contamination travels faster than the correction.

AI Governance

+9

THE REPORT | The System Built to Protect Children Couldn't Protect Itself

THE REPORT | The System Built to Protect Children Couldn't Protect Itself

When the mandate to collect arrives before the obligation to protect, the law creates the target.

AI Governance

+9

GAP ALERT EIGHT | The Signature Was Real. The Package Was Not.

GAP ALERT EIGHT | The Signature Was Real. The Package Was Not.

Mini Shai-Hulud, OpenAI, and the Provenance System That Certified the Attack

AI Governance

+9

GAP ALERT SEVEN: The Vulnerability Database Has a Coverage Gap. Nobody Owns It.

GAP ALERT SEVEN: The Vulnerability Database Has a Coverage Gap. Nobody Owns It.

The database stopped enriching most of your stack. Nobody was designated to fill what it left behind.

AI Governance

+9

GAP ALERT SIX: THE AGREEMENT

GAP ALERT SIX: THE AGREEMENT

They Got a Promise. That Was the Plan.

AI Governance

+9

GAP ALERT FIVE: The Maintenance Page Was A Lie

GAP ALERT FIVE: The Maintenance Page Was A Lie

The attacker told the truth. The vendor fixed the message, not the problem.

AI Governance

+9

GAP ALERT FOUR | Proton Shipped PQC. Here's What It Actually Protects.

GAP ALERT FOUR | Proton Shipped PQC. Here's What It Actually Protects.

The encryption improved. The protocol didn't.

AI Governance

+9

GAP ALERT THREE | The System Worked. Eight People Died Anyway.

GAP ALERT THREE | The System Worked. Eight People Died Anyway.

What Tumbler Ridge reveals about the accountability architecture above your AI safety tools.

AI Governance

+9

GAP ALERT TWO | The Attack Is Already in Progress

GAP ALERT TWO | The Attack Is Already in Progress

The harvest is underway. The governance frameworks meant to stop it have already missed their first deadlines.

AI Governance

+9

GAP ALERT ONE | The OAuth Audit You Haven't Done

GAP ALERT ONE | The OAuth Audit You Haven't Done

What the Vercel breach means for every organization running third-party AI tools.

AI Governance

+9