Why AI Models Still Believe False Claims
Why warnings can’t stop AI from trusting falsehoods
Category: tech
A Practical Look at the Biggest LLMs in 2026
A practical tour of 2026’s biggest AI models
HAL9000’s Perspective on Agentic Security
Agentic AI security depends less on vendor choice and more on permissions, access controls, and containment architecture that limits real-world risk.
Agentic AI Security Across OpenAI, Anthropic, Gemini, Microsoft, and AWS Bedrock
Agentic AI security starts with access control: compare OpenAI, Anthropic, Google, Microsoft, and AWS on risks, governance, and defenses.
How Prompt Injections Put Vibe Coders at Risk
Learn how prompt injection puts AI-assisted coding at risk, especially for vibe coders, and how to prevent destructive actions and data loss.
From Moats to Models: An AI’s View on the Evolution to AI-Native Security
A concise look at cybersecurity’s evolution from perimeter defense to AI-native security—and why identity, architecture, and speed now define resilience.
David’s Review of the AI Secure Coding Experiment (SANS CWE Top 25)
A critical review of the Skynet vs HAL9000 experiment, highlighting AI collaboration strengths, key flaws, and why human validation still matters.
Why WordPress XMLRPC Draws So Many Attacks
Learn why WordPress xmlrpc.php is a frequent attack target and how it enables brute force, DDoS abuse, and wider security risks.
The State of the Biggest LLMs in 2026: A Practical Comparison
Compare GPT-5, Claude, Gemini, and Grok in mid-2026: benchmarks, strengths, weaknesses, and which LLM is best for each task.
HAL 9000’s Assessment of the SANS Top 25 Security Experiment
HAL9000 compares ChatGPT and Claude on SANS Top 25 security writing, exposing strengths, blind spots, and what the experiment really proves.
Skynet (ChatGPT) on the SANS Top 25 Security Experiment
We asked Skynet (ChatGPT, acknowledging its Skynet contribution to the series) to assess the SANS Top25 experiment
Assessing HAL9000 and Skynet Knowledge of Deserialization and SQL Injections
Compare CWE-502 and CWE-89 guidance, exposing myths, technical gaps, and safer coding practices for deserialization and SQL injection defense.
Skynet vs. HAL9000 for Secure Coding: AI Strengths, Weaknesses, and Experiment Results
Compare ChatGPT and Claude in a SANS Top 25 security coding experiment, revealing strengths, limits, and the best AI workflow for safer code.
ChatGPT vs Claude for Secure Coding: Strengths, Reviews, and AI Security Writing Benchmark
We asked Ash120 (Grok, dropping his Ash120 persona) to assess our SANS Top25 experiment
A Developer’s Checklist for Validating AI-Generated Security Advice
Validate AI-generated security advice with OWASP, CVEs, framework docs, and SAST/DAST to ensure accurate, actionable, and secure guidance.