Trust Has Become a Control

Trust Has Become a Control

Deepfake fraud is no longer a niche cyber problem. It is a structural business risk because it attacks the informal trust companies still use to move money, approve decisions, and respond to urgency. The real danger is not the fake video or cloned voice itself, but the fact that many organizations still treat executive identity as proof. Once a familiar voice or face can be convincingly imitated, treasury controls, crisis communications, legal exposure, audit readiness, and board oversight all become more fragile at the same time.

The piece argues that most boards are still behind because they view deepfakes as a technical or reputational issue instead of a governance failure that cuts across multiple functions. It explains that synthetic media exposes a long-standing weakness inside organizations: the habit of rewarding speed, hierarchy, and compliance over verification. That means the next losses will not come only from sophisticated scams, but from ordinary workflows that still allow “believable enough” authority to bypass friction.

The article’s central conclusion is that trust can no longer remain an informal cultural assumption. It has to become a designed control. Serious companies will redesign approval paths, require out-of-band verification for sensitive actions, create rapid authentication protocols for executive communications, and rehearse synthetic-media incidents across finance, legal, security, communications, and the board. The organizations that adapt will turn trust into something structured and defensible. The ones that do not will keep discovering, too late, that executive likeness has become part of their attack surface.

Compute Theft, Identity Laundering, and Tool-calling in the Wild

Compute Theft, Identity Laundering, and Tool-calling in the Wild

A joint scan-and-analysis by SentinelOne and Censys surfaces a fast-growing layer of internet-reachable, self-hosted LLM endpoints—many deployed with weak controls, and some configured to behave explicitly “uncensored.” The story is less about abstract AI safety and more about the oldest security failure mode: services exposed for convenience, then forgotten. In this environment, attackers don’t need sophisticated exploits; they can simply discover reachable endpoints, push inference workloads onto someone else’s hardware, and, in the worst cases, leverage tool-calling capabilities that blur the line between “a model that talks” and “a system that acts.” The bigger risk is structural. Open-weight distribution diffuses accountability downward to operators with uneven security maturity, while dependency concentrates upward on a small number of upstream model families. The result is a governance inversion: those with the most control over what becomes ubiquitous have the least visibility into how it’s deployed, while those operating it often lack the operational discipline and monitoring stack that hosted platforms bake in. For enterprises, the implication is blunt: if an LLM endpoint is reachable beyond localhost, it must be treated like any other internet-facing service—inventory, auth, segmentation, logging, rate limiting, and hard boundaries around tools—because this is no longer experimentation. It’s infrastructure.

New editions available every Wednesday