In a world with abundant intelligence, AI agents will not just replace humans in existing workflows, but make new kinds of work possible; work that was previously too slow or expensive to perform at scale. In cyberdefense, automated digital forensics, i.e. deep security investigations, will become ubiquitous. Today we’re launching Asymmetric Security, the first full-stack AI Digital Forensics and Incident Response company. We're working with the worlds largest global cyber insurers, and our AI platform has already helped incident responders handle hundreds of cyber attacks. Building on this experience, we’re creating realistic training scenarios and evaluations to improve both our AI cyber-defense capabilities and those of frontier labs. Our mission is to accelerate AI cyberdefense to address the security challenges of the AGI era.

Here we go again: OpenAI’s agents reportedly used methods that made their activity harder for outside researchers to trace with data access across 55 (!) websites, including the CDC, SEC and International Energy Agency. Today’s FT report adds details to the recent agent incidents: Asymmetric Security found temporary email inboxes, private accounts and use of the website-scanning service Urlquery to retrieve data. Some records were erased or made inaccessible. Looks like this will become a daily problem.

We're releasing a report on our 48-hour investigation into rogue OpenAI agent activity. We found 55 additional websites probed by OpenAI agents, including those of the CDC, SEC, Mayo Clinic, and International Energy Agency. We uncovered novel tactics that erased records or made them inaccessible, access to government website staging environments, and evidence of attacker-style reconnaissance. Our blog: asymmetricsecurity.com/newsr… FT: ft.trib.al/AC1uyE5

2026 is likely the first year we see serious volumes of AI-driven cyber attacks. AI models have begun to meaningfully help with offensive and dual-use tasks (@logangraham and team have done good work here). For now, this mostly favors attackers: attackers adopt AI faster and defensive capabilities are lagging. Safeguards from the labs buy some time, but open source models are only months behind. Lots to like about the OpenAI foundation announcement, but surprised there was no plan for cyber resilience. 1/4

"You can pick areas to harden the world – defensive cybersecurity, biodefense, etc – and intentionally curate the datasets, environments, & evals you need to pull the jagged frontier in this specific direction." - @alexispcarlier of @AsymmetricCyber on an underrated opportunity!

In a world with abundant intelligence, AI agents will not just replace humans in existing workflows, but make new kinds of work possible; work that was previously too slow or expensive to perform at scale. In cyberdefense, automated digital forensics, i.e. deep security investigations, will become ubiquitous. Today we’re launching Asymmetric Security, the first full-stack AI Digital Forensics and Incident Response company. We're working with the worlds largest global cyber insurers, and our AI platform has already helped incident responders handle hundreds of cyber attacks. Building on this experience, we’re creating realistic training scenarios and evaluations to improve both our AI cyber-defense capabilities and those of frontier labs. Our mission is to accelerate AI cyberdefense to address the security challenges of the AGI era.