What adversarial exposure validation actually means, why point-in-time testing fails in 2026, and how to build a real AEV program. No hype, just numbers.
Insights from a closed-door roundtable on AI agent safety and governance, chaired by Bruce Schneier and hosted by FireCompass founder Bikash Barai. Participant comments are kept anonymous by agreement. The most useful thing about this roundtable was that nobody pretended to have the answer. A room of senior security leaders spent an hour on AI… Read More »AI Agents Are Doing Real Work. Governing Them Is the Unsolved Problem
AI has already changed offensive security. The open question for security leaders is what to do about it. A recent EC-Council CyberTalks session of the same name addressed the question directly, featuring FireCompass co-founders Bikash Barai and Arnab Chattopadhayay, along with a CISO from a global financial group. What follows is the part a CISO… Read More »FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond
Early January, I published a deep dive into why we ripped out JSON-RPC and rewrote our Model Context Protocol (MCP) server using gRPC for our internal AI initiatives. The idea was simple: if you are building enterprise-grade agents, you cannot rely on the “guesswork” of dynamic JSON payloads. You need the strict guarantees of Protobufs.… Read More »Before Google Cloud Backed gRPC for MCP, FireCompass Built It for Our AI Agents
SEBI’s May 5, 2026, circular (HO/13/19/12(1)2026-ITD-1_CIMGI/10873/2026) is addressed to every category of regulated entity in the Indian securities market — exchanges, depositories, brokers, mutual funds, custodians, credit rating agencies, merchant bankers, portfolio managers, investment advisors, and more. Over 10,000 entities. The subject: AI-driven vulnerability detection tools like “Claude Mythos” and the new risk dimensions they… Read More »SEBI AI Guidelines: What 10k+ Financial Entities Must Do