AI Security / Analysis
Prompt injection begins where instructions and information meet
When an AI assistant reads the outside world, it must decide what is evidence and what has authority. That boundary is the security problem.
THE BYTE WATCHR ARCHIVE
Latest coverage
Read the latest technology, AI and cybersecurity analysis, explainers and practical field guides from Byte Watchr.
Stories in this collection
Cybersecurity / Analysis
Passkeys change the login. Recovery decides the risk.
Phishing-resistant sign-in is a major improvement. The harder design work begins when a person loses the devices and accounts that hold their credentials.
Artificial Intelligence / News analysis
Google's Search-agent plan changed the question from finding information to monitoring it
The May I/O announcements opened a useful debate about persistent search, notification quality, and the difference between a promise and a deployed service.
Startups / Field guide
How to read an AI startup’s claims before you buy
Turn a persuasive demonstration into a testable purchasing decision by specifying the job, the evidence, the data path, and the work that remains with your team.
Cybersecurity / Field guide
A backup is only useful when the business can restore it
A successful backup job measures copying. Ransomware readiness requires evidence that people, systems, and trusted data can come back together.
Cyberwarfare / Analysis
What the 2024 Volt Typhoon warning taught infrastructure defenders
The joint advisory made persistent access and the paths toward operational systems central concerns. Its enduring lesson is to examine what an intruder could eventually reach.
Technology / Explainer
On-device AI privacy starts with tracing the entire data path
Where a model runs matters, but a useful privacy assessment also follows inputs, outputs, retained records, and the services surrounding the model.
Software / Field guide
A container boundary is only one part of a workload's security design
To reason about isolation, examine the host, control plane, network, storage, and credentials that a workload can reach.
Companies / News analysis
Microsoft and OpenAI's revised agreement separated several kinds of dependence
The April amendment is a useful case study in why cloud access, intellectual-property rights, revenue sharing, and ownership should be read separately.
Cybersecurity / News analysis
The NCSC's covert-network warning challenged simple assumptions about attack origins
The April advisory is a useful starting point for examining what an observed connection can establish, and what it cannot.
AI Security / Field guide
Your AI supply chain includes more than a model
Weights, tokenizers, plugins, dependencies and serving infrastructure form one operating system of trust. Inventory them together.
Data Breaches / Field guide
The first 24 hours after a data breach
The early response should stop continuing harm, preserve evidence, and create a reliable decision process. A rigid countdown is less useful than clear ownership.