AI 2025 trends

TL;DR A production Model Context Protocol server should not treat possession of any bearer token as sufficient authority. It should validate who issued the token, confirm that the token was minted for that specific MCP resource, enforce narrowly defined scopes at both the transport and tool layers, and record authorization decisions without logging credentials or

There are a lot of AI coding applications out there, and as impressive as large language models and the agents they enable have become, many of the most recent developments in AI-assisted development have been in the software that manages those models, not just the models themselves. Earlier this summer, I spoke with the head

Once an AI agent has access to enterprise systems, identity cannot be treated as a one-time setup task. It needs a lifecycle. That lifecycle starts before the agent is created and ends only after the identity, permissions, logs, and downstream access paths have been retired or archived appropriately. This is where many agent programs will

Chinese companies are offering artificial intelligence that is nearly as good as the leading U.S. technologies, but it’s still America’s race to lose.

World leaders are marching us toward an uncertain era of new warfare — fast.

As AI supercharges cyber threats, organisations face multiple challenges: a new breed of reckless western hackers trying to impress their peers; fake remote workers attacking from the inside; and supply-chain weaknesses

It is becoming clear that the knowledge they require is currently locked inside employees’ heads

As AI supercharges cyber threats, organisations face multiple challenges: a new breed of reckless western hackers trying to impress their peers; fake remote workers attacking from the inside; and supply-chain weaknesses

Criminal groups are building deepfake personas on an industrial scale to trick people into divulging information

Use of AI deepfake employees to infiltrate companies highlights wider risk of internal security breaches