Nov 11, 2026 · 8 min
Cloud trust failures expose AI, universities and government networks
New CISA head, AI safety regulator, N-able's zero-day deluge
The briefing connects fast-moving AI oversight and cryptographic assurance with breaches exploiting trusted access, unpatched systems and third-party providers.
- 1Australia plans an AI safety regulator while the U.S. moves toward new CISA leadership and updates incident reporting.
- 2Google DeepMind formally verifies Signal’s key protocols, showing how cryptographic assurance can move faster with prior foundational work.
- 3Recent attacks exploited trusted AWS relationships, government email servers, enterprise flaws and a third-party cloud provider.
Don't miss
Google DeepMind formally verifies Signal’s cryptographic guarantees in an unusually fast four-week effort.
The brief
Australia plans an AI safety regulator with security and incident-reporting requirements, while the U.S. nominates new CISA leadership and updates its reporting portal.
Google DeepMind used AlphaProof to formally verify guarantees in Signal’s key protocols in four weeks, accelerated by earlier work from the Signal Foundation.
A ransomware attack forced Vanderbilt to take digital services offline, while the BYOD group claimed it stole more than one million Social Security numbers.
Attackers used compromised QBOL credentials and trusted AWS cross-account roles to reach dozens of customer environments, steal secrets and download accessible S3 data.
The briefing closes with Turla’s espionage toolkit, actively exploited Barracuda flaws, major SAP and Microsoft patches, and Fireworks AI’s second disclosed breach.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.