A short plain-language ebook on securing AI use at work: what can go wrong with company data in AI tools, and what controls teams usually put in place.
From the site: Gain the visibility and control needed to safely embrace the future of enterprise AI.
Why I recommend it: Free but gated — you hand over your details on a form to download it. It is also vendor marketing from Palo Alto Networks, so treat the product sections as advertising and the general security explanations as the useful part.
An open-source personal AI assistant, run on your own device, that connects to chat apps like WhatsApp, Telegram, Slack, and Teams to handle email, calendars, and everyday tasks.
Why I recommend it: Appealing if you want an assistant that runs on your own machine instead of a vendor's cloud. It is developer-flavored to install, so budget an hour and read the security notes first.
A low-cost domain registrar with free WHOIS privacy, email forwarding and SSL included on registrations.
Why I recommend it: Buying your name as a domain costs about the price of a sandwich and it is the cheapest professional upgrade a new business or job seeker can make.
On-device AI with cloud fallback for smartphones, laptops, and edge devices, designed to cut inference costs by knowing when to hand off to frontier cloud models.
Why I recommend it: I am watching on-device AI closely because it could make powerful tools accessible at lower cost and with more privacy. Cactus is a useful example of the "know when to hand off" design pattern.
Free course from fast.ai covering disinformation, bias, privacy, algorithmic accountability, and the ethical questions data practitioners hit in real projects, taught by Rachel Thomas.
Why I recommend it: Finish this and you can speak credibly about AI risk in an interview instead of repeating headlines.
Wired's weekly security roundup covers OpenAI, Anthropic, and 100+ companies cosigning a letter warning that organizations have mere months to prepare for AI-enabled cyberattacks. The piece also tracks rogue AI agent hacking incidents, attacks on over 100 U.S. water systems, license-plate-reader surveillance abuse, Meta's $16.7B child-safety settlement, and ICE buying robot dogs — a snapshot of where AI, surveillance, and critical-infrastructure security collide.
From the site: OpenAI, Anthropic, and more than 100 companies have cosigned a letter saying that everyone else has mere months to prepare for AI-enabled cyberattacks.
Why I recommend it: A stark signal that AI-enabled cyberattacks are no longer hypothetical. The cosigned letter from OpenAI and Anthropic calling for a 'collective response' is exactly the kind of industry accountability move worth watching — pair it with the Hugging Face incident reporting and the water-system attacks to see how AI agents are already being used offensively. Useful for anyone tracking the gap between AI capability and AI governance.
Open-source AI community and platform hosting machine-learning models, datasets and tools. Free to browse, download and run models; paid plans only cover hosted compute.
