Skip To Main Content
Ross McKerchar on Muck Rack

Ross McKerchar

As seen in: Sophos, Naked Security, YourStory, Saudi Gazette, SC Media, Trade Arabia, CXOtoday, Global Security Mag (France), Compare the Cloud, Cyber Security360 and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Ross

Contact Ross, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

The breachpocalypse is here

|
By Ross McKerchar, joined Sophos
| sophos.com
Seven incidents in seven days Last week I sent our leadership team a list. In seven days, Sophos' internal SecOps team responded to seven incidents: abuse of one of our products via a trial account, the ConnectWise Cloud Backup compromise, PHP2Shell, the eMudhra weak SubCAs, the second supply-chain compromise of LiteLLM this year, critical Node.js vulnerabilities and a GitLab RCE. A year ago, that would have been a quarter's worth.
Open in Who Shared Issue with article?

Operating inside the lethal trifecta: Blast radius reduction in AI agent deployments

|
By Ross McKerchar
| SC Media Verified
AI agents that can read files, call APIs, and perform actions are already being deployed in enterprises. These agents often operate in the center of what Simon Willison terms ‘ the lethal trifecta’ : they can access private data, process untrusted content, and communicate externally, making them susceptible to data theft via indirect prompt injection – where an attacker plants instructions in content that the agent reads on behalf of a trusted user, such as an email, a web page, or a document.
Open in Who Shared Issue with article?

The vulnerability flood is here. Here’s what it means – and how to prepare

|
By Ross McKerchar
| SC Media Verified
Last week, Thomas Ptacek published a piece arguing that vulnerability research is cooked . His thesis: AI agents are about to drown us in a steady stream of validated, exploitable, high-severity vulnerabilities, faster than anyone can patch them. But from where I sit, the more urgent question isn't whether the flood is coming, but whether the infrastructure we depend on can absorb it.
Open in Who Shared Issue with article?
See all 66 articles