Securing.AI – AI Security, Safety and Privacy

September 20, 2023

Why We Need a Chief AI Security Officer (CAISO)

April 7, 2024

The Dual Risks of AI Autonomous Robots: Uncontrollable AI Meets Cyber-Kinetic Risks

October 17, 2024

Closing the Gap Between AI Principles and AI Reality

January 1, 2024

Addressing the Full Stack of AI Concerns: Responsible AI, Trustworthy AI, Secure AI and Safe AI Explained

Our Latest Articles

Marin IvezicSeptember 5, 2026

The AI Act Now Recognises Agents. Its Security Rules Still Miss Them.

The Commission's AI Act Service Desk says agents are covered by the existing definitions and calls its own considerations preliminary.…
Read More »
Marin IvezicSeptember 5, 2026

One AI Incident, Four Reporting Regimes, and the Carve-Outs That Decide Which Apply

Cyber Resilience Act reporting starts 11 September 2026, joining three other European regimes. The AI Act already limits its own…
Read More »
Marin IvezicSeptember 5, 2026

The AI Act’s Transparency Code Relies on Watermarks That Break

Article 50 requires marking that is effective and robust as far as technically feasible, and prescribes no technique. The Code…
Read More »
Marin IvezicSeptember 5, 2026

The AI Act’s GPAI Security Chapter Is a Weight Security Mandate

Article 55(1)(d) requires an adequate level of cybersecurity for a frontier model and its physical infrastructure, and the Commission-endorsed Code…
Read More »
Marin IvezicSeptember 5, 2026

Article 15 Requires Robustness Nobody Can Measure

Article 15(5) runs to three sentences and most summaries quote only the first. The other two set a proportionality standard…
Read More »
Marin IvezicSeptember 5, 2026

The EU AI Act for Security Teams

The first enforcement step under the EU AI Act was a demand for security evidence. What the Digital Omnibus deferred…
Read More »
Marin IvezicSeptember 2, 2026

You Can Bomb the Data Centre. You Cannot Uncopy the Model.

Striking AI infrastructure can stop a training run, destroy accelerators and deny a rival its models for months. What force…
Read More »
Marin IvezicSeptember 1, 2026

Your Multi-Region Architecture Assumes the Weather

Cloud resilience architecture is built against hazards: storms, fibre cuts, bad deploys. On 1 March 2026 one AWS region absorbed…
Read More »
Marin IvezicAugust 31, 2026

What Still Keeps Frontier Training Concentrated

Every argument about attacking AI compute assumes frontier training stays physically concentrated. That is an engineering trade-off rather than a…
Read More »

Previous Next

Marin Ivezic

In the early 2000s, running emerging-technology risk labs at CyberAgency, a defence client asked my team to break the AI systems they planned to put into weapons. We did. That is where my work on AI security started, two decades before the current wave of attention. I kept at it through risk labs at IBM, Accenture, PwC and KPMG. In 2016 I co-wrote a book on AI and leadership. My commercial work today is quantum, at Applied Quantum, which is why this site sells nothing.

Luka Ivezic

Luka Ivezic co-wrote The Future of Leadership in the Age of AI with Marin in 2016, and co-authored much of the early writing on this site. He is Practice Lead, Regulations & Emerging Technologies at the Information Security Forum, where he covers EU regulation and the security of AI, OT and IoT. He was previously a cybersecurity consultant at PwC and Deloitte. He holds a Master’s in International Conflict Studies from King’s College London, where his research examined the security implications of AI.

Most Viewed Articles This Week

Safe, Secure, Responsible, Trustworthy AI

August 23, 2024

AI Security Articles

Marin IvezicSeptember 5, 2026

The AI Act’s GPAI Security Chapter Is a Weight Security Mandate

Article 55(1)(d) requires an adequate level of cybersecurity for a frontier model and its physical infrastructure, and the Commission-endorsed Code turns that into weight-level controls. In August 2026 the AI Office started asking for the evidence.
Read More »
Marin IvezicSeptember 5, 2026

Article 15 Requires Robustness Nobody Can Measure

Article 15(5) runs to three sentences and most summaries quote only the first. The other two set a proportionality standard nobody can measure, because no benchmark, no harmonised standard and no threat-model-independent robustness metric exists.
Read More »
Marin IvezicAugust 26, 2026

Feature Attribution Attacks: When Explanations Become the Vulnerability

An explanation is computed from the model it describes, which makes it both forgeable and informative. Seven years of published attacks show what that costs a security team relying on SHAP or LIME as assurance.
Read More »
Marin IvezicAugust 25, 2026

Your Model Explanations Are an Attack Surface

Explanation is deployed to build trust in a model and transfers more information to an attacker than to a defender. Forgery, extraction, membership inference and guided evasion, and the one case where it works.
Read More »
AI Safety and Alignment

Marin IvezicOctober 17, 2024

Closing the Gap Between AI Principles and AI Reality

In pursuit of AI systems that are ethical and robust we are seeing the emergence of an, ironically, ethical challenge: firms rushing to position themselves as leaders in Responsible AI without the necessary depth in technical expertise. Though their…
Read More »
AI Safety and Alignment

Marin IvezicAugust 23, 2024

Addressing the Full Stack of AI Concerns: Responsible AI, Trustworthy AI, Secure AI and Safe AI Explained

As AI continues to evolve and integrate deeper into societal frameworks, the strategies for its governance, alignment, and security must also advance, ensuring that AI enhances human capabilities without undermining human values. This requires a vigilant, adaptive approach that…
Read More »

Previous Next

AI Safety Articles

AI Safety and Alignment

Marin IvezicOctober 17, 2024

Closing the Gap Between AI Principles and AI Reality

In pursuit of AI systems that are ethical and robust we are seeing the emergence of an, ironically, ethical challenge: firms rushing to position themselves as leaders in Responsible AI without the necessary depth in technical expertise. Though their motivations for doing so may not be malicious, the impact is the dilution of the AI security field, something which society…
Read More »
AI Safety and Alignment

Marin IvezicAugust 23, 2024

Addressing the Full Stack of AI Concerns: Responsible AI, Trustworthy AI, Secure AI and Safe AI Explained

As AI continues to evolve and integrate deeper into societal frameworks, the strategies for its governance, alignment, and security must also advance, ensuring that AI enhances human capabilities without undermining human values. This requires a vigilant, adaptive approach that is responsive to new challenges and opportunities, aiming for an AI future that is as secure as it is progressive.
Read More »
AI Safety and Alignment

Marin IvezicApril 7, 2024

The Dual Risks of AI Autonomous Robots: Uncontrollable AI Meets Cyber-Kinetic Risks

The automotive industry has revolutionized manufacturing twice. The first time was in 1913 when Henry Ford introduced a moving assembly line at his Highland Park plant in Michigan. The innovation changed the production process forever, dramatically increasing efficiency, reducing the time it took to build a car, and significantly lowering the cost of the Model T, thereby kickstarting the world’s…
Read More »
AI Safety and Alignment

Marin IvezicJanuary 1, 2024

Marin’s Statement on AI Risk

The rapid development of AI brings both extraordinary potential and unprecedented risks. AI systems are increasingly demonstrating emergent behaviors, and in some cases, are even capable of self-improvement. This advancement, while remarkable, raises critical questions about our ability to control and understand these systems fully.
Read More »
AI Privacy

Marin Ivezic and Luka IvezicSeptember 20, 2023

Why We Need a Chief AI Security Officer (CAISO)

With AI’s breakneck expansion, the distinctions between ‘cybersecurity’ and ‘AI security’ are becoming increasingly pronounced. While both disciplines aim to safeguard digital assets, their focus and the challenges they address diverge in significant ways. Traditional cybersecurity is primarily about defending digital infrastructures from external threats, breaches, and unauthorized access. On the other hand, AI security has to address unique challenges…
Read More »
AI Safety and Alignment

Marin Ivezic and Luka IvezicJune 29, 2023

The AI Alignment Problem

The AI alignment problem sits at the core of all future predictions of AI’s safety. It describes the complex challenge of ensuring AI systems act in ways that are beneficial and not harmful to humans, aligning AI goals and decision-making processes with those of humans, no matter how sophisticated or powerful the AI system becomes. Our trust in the future…
Read More »

Previous Next

AI Privacy Articles

Marin IvezicAugust 27, 2026

Secure Multi-Party Computation Hides the Inputs, Not the Answer

Secure multi-party computation protects the inputs to a computation and reveals the output exactly as computed. In machine learning the output is a model or a prediction, and both leak. What MPC covers, what its benchmarks assume, and what to ask.
Read More »
AI Privacy

Marin Ivezic and Luka IvezicSeptember 20, 2023

Why We Need a Chief AI Security Officer (CAISO)

With AI’s breakneck expansion, the distinctions between ‘cybersecurity’ and ‘AI security’ are becoming increasingly pronounced. While both disciplines aim to safeguard digital assets, their focus and the challenges they address diverge in significant ways. Traditional cybersecurity is primarily about defending digital infrastructures from external threats, breaches, and unauthorized access. On the other hand, AI security has to address unique challenges…
Read More »
AI Privacy

Marin Ivezic and Luka IvezicJuly 21, 2023

Securing Machine Learning Workflows through Homomorphic Encryption

Homomorphic Encryption has transitioned from being a mathematical curiosity to a linchpin in fortifying machine learning workflows against data vulnerabilities. Its complex nature notwithstanding, the unparalleled privacy and security benefits it offers are compelling enough to warrant its growing ubiquity. As machine learning integrates increasingly with sensitive sectors like healthcare, finance, and national security, the imperative for employing encryption techniques…
Read More »
AI Privacy

Marin Ivezic and Luka IvezicNovember 11, 2022

How Dynamic Data Masking Reinforces Machine Learning Security

Data masking, also known as data obfuscation or data anonymization, serves as a crucial technique for ensuring data confidentiality and integrity, particularly in non-production environments like development, testing, and analytics. It operates by replacing actual sensitive data with a sanitized version, rendering the data ineffective for malicious exploitation while retaining its functional utility for testing or analysis.
Read More »
AI Privacy

Marin Ivezic and Luka IvezicJune 2, 2022

Differential Privacy Protects the Training Set, Not the System

What epsilon actually guarantees, why deployed values sit near 10, and what differential privacy leaves uncovered in a 2026 AI system.
Read More »
AI Privacy

Marin Ivezic and Luka IvezicFebruary 11, 2021

What Model Inversion Attacks Actually Recover

Model inversion recovers class representatives more often than individuals, its dominant evaluation framework counts adversarial examples as successful reconstructions, and embedding inversion has become a separate privacy problem in enterprise retrieval systems.
Read More »

Previous Next

AI Disinformation Articles

Marin IvezicSeptember 5, 2026

The AI Act’s Transparency Code Relies on Watermarks That Break

Article 50 requires marking that is effective and robust as far as technically feasible, and prescribes no technique. The Code selects watermarking and provenance metadata. Published attacks remove both and forge the second.
Read More »
AI Disinformation

Marin Ivezic and Luka IvezicDecember 6, 2022

Introduction to AI-Enabled Disinformation

In recent years, the rise of artificial intelligence (AI) has revolutionized many sectors, bringing about significant advancements in various fields. However, one area where AI has presented a dual-edged sword is in information operations, specifically in the propagation of disinformation. The advent of generative AI, particularly with sophisticated models capable of creating highly realistic text, images, audio, and video, has…
Read More »
AI Disinformation

Marin Ivezic and Luka IvezicAugust 7, 2020

Targeted Disinformation

Targeted disinformation poses a significant threat to societal trust, democratic processes, and individual well-being. The use of AI in these disinformation campaigns enhances their precision, persuasiveness, and impact, making them more dangerous than ever before. By understanding the mechanisms of targeted disinformation and implementing comprehensive strategies to combat it, society can better protect itself against these sophisticated threats.
Read More »
AI Disinformation

Marin Ivezic and Luka IvezicMarch 15, 2019

AI-Exacerbated Disinformation and Threats to Democracy

Recent events have confirmed that the cyber realm can be used to disrupt democracies as surely as it can destabilize dictatorships. Weaponization of information and malicious dissemination through social media pushes citizens into polarized echo chambers and pull at the social fabric of a country. Present technologies enhanced by current and upcoming Artificial Intelligence (AI) capabilities, could greatly exacerbate disinformation…
Read More »

AI (Other) Articles

AI Perspectives

Marin Ivezic and Luka IvezicMay 23, 2023

A (Very) Brief History of AI

As early as the mid-19th century, Charles Babbage and Ada Lovelace created the Analytical Engine, a mechanical general-purpose computer. Lovelace is often credited with the idea of a machine that could manipulate symbols in accordance with rules and that it might act upon other than just numbers, touching upon concepts central to AI.
Read More »
AI Perspectives

Marin IvezicMay 4, 2019

Risks of AI – Meeting the Ghost in the Machine

Because it demands so much manpower, cybersecurity has already benefited from AI and automation to improve threat prevention, detection and response. Preventing spam and identifying malware are already common examples. However, AI is also being used – and will be used more and more – by cybercriminals to circumvent cyberdefenses and bypass security algorithms. AI-driven cyberattacks have the potential to…
Read More »
AI Disinformation

Marin Ivezic and Luka IvezicMarch 15, 2019

AI-Exacerbated Disinformation and Threats to Democracy

Recent events have confirmed that the cyber realm can be used to disrupt democracies as surely as it can destabilize dictatorships. Weaponization of information and malicious dissemination through social media pushes citizens into polarized echo chambers and pull at the social fabric of a country. Present technologies enhanced by current and upcoming Artificial Intelligence (AI) capabilities, could greatly exacerbate disinformation…
Read More »
AI Perspectives

Marin IvezicDecember 14, 2018

Introducing Quantum Artificial Intelligence (QAI): The Future Intersection of Quantum Computing and AI

Table of ContentsIntroductionExponential Growth in AI Computing RequirementsIntroduction to Quantum Artificial Intelligence (QAI)Why Quantum Computers Are Well-Suited for Manipulating Vectors and Matrices Required by AIRecent Key Quantum Artificial Intelligence (QAI) Research PapersQuantum Machine Learning AlgorithmsApplications of Quantum AIChallenges and Future DirectionsConclusion Introduction (This article was originally published in 2018. Updated in 2022 after the release of ChatGPT) While I like…
Read More »
AI Perspectives

Marin IvezicSeptember 12, 2018

AI: The Shifting Battlefield in the Cybersecurity Arms Race

Cybersecurity strategies need to change in order to address the new issues that Machine Learning (ML) and Artificial Intelligence (AI) bring into the equation. Although those issues have not yet reached crisis stage, signs are clear that they will need to be addressed – and soon – if cyberattackers are to be prevented from obtaining a decided advantage in the…
Read More »
AI Perspectives

Marin IvezicFebruary 6, 2018

AI Is Neither the End of Civilization nor the Beginning of Nirvana

Where AI, robots, IoT and the so-called Fourth Industrial Revolution are taking us, and how we should prepare for it are some of the hottest topics being discussed today. Perhaps the most striking thing about these discussions is how different people’s conclusions are. Some picture a utopia where machines do all work, where all people receive a universal basic income…
Read More »

Previous Next