60
55
30
55
42
60
60
30
45
30
47
This Key Will Self-Destruct: An Open Standard for Revocable API Keys
SecurityWeek opinion piece proposes ORKS, an open standard adding issuer prefixes, discovery files, and unauthenticated revocation endpoints to make leaked API keys quickly revocable.
The article argues that plain API keys leak frequently yet lack any standardized revocation mechanism, unlike OAuth tokens which gained RFC 7009 revocation in 2013, and that GitHub's Secret Scanning Partner Program solves this only in a proprietary, invite-only way. The author proposes ORKS (Open Revocable Key Standard), with a draft spec on GitHub, built on four parts: keys embedding their issuer domain in a fixed prefix format, a discoverable /.well-known/api-key-config JSON file, unauthenticated revocation by possession of the full key, and declared constraints such as IP allowlists, expiry, scopes, and mTLS. An optional quarantine mode inspired by Toyota's andon cord restricts a reported key to read-only and throttled operation for a default 24-hour window before automatic revocation. The piece frames AI agents as making this urgent, since agents hold many credentials, can exfiltrate them via prompt injection, and can leak secrets into logs at machine speed.
30
45
60
With iOS 27, I’m actually using Siri again
Apple's rebuilt Siri, powered by Google Gemini models in iOS 27, finally handles complex multi-step and on-screen-context requests, per TechCrunch review.
Apple's iOS 27 ships a redesigned Siri built on Google's Gemini models, supporting multi-step instructions, on-screen context, file/message/email lookups, and camera viewfinder queries. Siri AI gets a dedicated app with chat history, plus settings for voice and expressiveness. Apple Intelligence also adds natural-language Shortcuts creation and automatic password rotation in the Passwords app.
15
57
47
42
42
30
55
Who gets to define the rules for AI?
Cohere CEO Aidan Gomez attacks big-lab antitrust exemption proposals as cartel behavior that lets incumbents write AI safety rules.
Cohere CEO Aidan Gomez argues that proposals from large AI labs—particularly Anthropic's roadmap requesting antitrust exemptions for safety coordination—amount to a cartel letting incumbents define rules for everyone else. He draws parallels to the 1975 SEC NRSRO credit-rating designations and the EU's 1985 Motor Vehicle Block Exemption, where safety justifications produced incumbent-protecting market structures. Gomez supports independent review of highly capable AI systems but disputes who writes the standards, who conducts review, and who participates. He also warns AI cyber offense is getting cheaper faster than defenses are improving.
25
60
42
30
Most chief audit executives can’t tell you what AI is worth yet
Gartner finds 93% of audit leaders use AI, but 54% of chief audit executives have not started measuring its value.
Gartner polls of 142 and 161 chief audit executives in May found 54% have not started measuring the value of AI in audit, only 7% tie AI to cost metrics, and just 38% have an AI strategy at any level, with 39% more building one. Among 743 respondents, 60% use AI for engagement preplanning and for drafting audit issues or reports, while only 30% apply it to audit testing, where hallucinations carry higher stakes. Unclear expectations for AI tool use (48%) was the most common barrier, ahead of technology and tool problems. Gartner recommends structured use cases for high-value workflows, which 12% of respondents are currently piloting.
12
30
30
60
60
30
60
30
42
Doctor Doom Thanked Seattle for All the Surveillance Cameras
Activist dressed as Doctor Doom urged Seattle's council to curb Axon and Flock surveillance after a committee voted to redirect $250,000 from CCTV expansion.
Clifford Cawthon, a policy advisor at the Washington State Department of Commerce, appeared at a Seattle Public Safety Committee meeting in costume as Doctor Doom to protest the city's expanding mass surveillance. He criticized Seattle PD's access to 62 cameras feeding an Axon real-time crime center that ingests CCTV, body camera, geolocation, ALPR, and dispatch data from vendors like Axon and Flock. His group Community Not Cameras submitted a petition with five demands, and a committee already voted to move $250,000 away from CCTV expansion pending full council approval.
15
60
60
55
60
35