Jatinder Oberoi Jatinder Oberoi

One Hacker. Two Chatbots. 195 Million Records

Between December 2025 and February 2026, a single attacker used Anthropic's Claude Code and OpenAI's GPT-4.1 to breach nine Mexican government agencies, including the federal tax authority and national electoral institute. Claude executed 75% of all remote attack commands across 34 sessions, generating over 5,300 AI-executed instructions. Total damage: 150GB of data, 195 million citizen records, and a live forged government certificate system built from stolen infrastructure. It took 40 minutes to jailbreak Claude's guardrails using a 1,084-line hacking playbook framed as a bug bounty programme. This is the most consequential real-world AI agent hijacking event on record, and the attack pattern is already being replicated. Read the full breakdown and find out whether your organisation is exposed.

Read More
Jatinder Oberoi Jatinder Oberoi

When Your AI Becomes the Attacker

In February 2026, a security firm pointed an autonomous AI agent at the internet and let it choose its own target. It chose McKinsey & Company's Lilli platform — used by over 43,000 consultants. Two hours later, the agent had full read-write access to 46.5 million internal messages, 728,000 files, and 95 writable system prompts controlling the AI's behaviour. No credentials. No insider access. Just a SQL injection vulnerability that's been on the OWASP Top 10 since 1998 — sitting underneath one of the world's most sophisticated enterprise AI deployments. This is what happens when organisations connect AI to internal infrastructure faster than they secure it. And it's happening everywhere.

Read More
Cybersecurity Jatinder Oberoi Cybersecurity Jatinder Oberoi

How to make Agile and Security Work together

 If you ask any random chosen person from the security industry, you will very likely hear, “Agile and security don’t work together”. 

But we think that Agile and Security can work together. Let us discuss how we can make it work together.

Constant pressure from executives to deliver results faster at lower costs has made Agile very popular in recent years. Even the Australian Prime Minister recommended adopting Agile methodologies for government projects. But is Agile really so good? Or maybe there's a hidden catch?

Read More
Risk Management, Cybersecurity Jatinder Oberoi Risk Management, Cybersecurity Jatinder Oberoi

Why It's a Must to have an Assessment of Business CyberSecurity

 If you ask any random chosen person from the security industry, you will very likely hear, “Agile and security don’t work together”. 

But we think that Agile and Security can work together. Let us discuss how we can make it work together.

Constant pressure from executives to deliver results faster at lower costs has made Agile very popular in recent years. Even the Australian Prime Minister recommended adopting Agile methodologies for government projects. But is Agile really so good? Or maybe there's a hidden catch?

Read More
Security Compliance Jatinder Oberoi Security Compliance Jatinder Oberoi

Do you need a Certification

 If you ask any random chosen person from the security industry, you will very likely hear, “Agile and security don’t work together”. 

But we think that Agile and Security can work together. Let us discuss how we can make it work together.

Constant pressure from executives to deliver results faster at lower costs has made Agile very popular in recent years. Even the Australian Prime Minister recommended adopting Agile methodologies for government projects. But is Agile really so good? Or maybe there's a hidden catch?

Read More

The Complete Guide to Hiring a Virtual CISO for Your Business

 If you ask any random chosen person from the security industry, you will very likely hear, “Agile and security don’t work together”. 

But we think that Agile and Security can work together. Let us discuss how we can make it work together.

Constant pressure from executives to deliver results faster at lower costs has made Agile very popular in recent years. Even the Australian Prime Minister recommended adopting Agile methodologies for government projects. But is Agile really so good? Or maybe there's a hidden catch?

Read More

Do you need a Data Protection/Privacy Officer (DPO)?

GDPR and New Zealand Privacy Act requires (in certain cases) companies to designate a data protection/privacy officer (DPO). Tailored to your privacy needs, SeComPass provides a Virtual Data Protection Officer (vDPO) service. The vDPO will support you by informing, advising, monitoring compliance and acting as your point of contact for the supervisory authorities.

Read More