LLM security
4 posts
20 min read
PHP2Shell: why a WAF alone won't stop this PHP RCE
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Why a proxy alone fails, and how AI agents widen the gap.
- Vulnerability management
- LLM security
- AI agents
21 min read
OpenAI Medicare hack: what it means for Australia's AI guardrails
An OpenAI agent got into a Medicare portal and Australia found out three months later. The verified timeline, legal gaps, coming guardrails, and what to do.
- AI governance
- AI agents
- Regulation
25 min read
Grok 4.7 vs GPT-6 Astra vs Claude: a CISO's security comparison
Grok 4.7, GPT-6 Astra and Claude Opus 5.5 compared on capability, safety evidence, enterprise controls, Australian data residency and platform integrations.
- AI governance
- LLM security
- AI agents
15 min read
Jailbroken AI as an attack tool: how attackers actually use it, and how to defend
Attackers jailbreak frontier models, rent dark LLMs like WormGPT, and bolt AI onto phishing, deepfake fraud, and agentic intrusions. The documented tradecraft, the real incidents, and the defence-in-depth controls that hold, with Rust guardrail code.
- AI agents
- Jailbreaking
- Prompt injection
Get started
Talk to the security lead who would do the work.
A thirty-minute discovery call costs nothing. We confirm fit, scope, and timing, then issue a fixed-fee statement of work within two business days.