FEATURED ESSAY · SEPTEMBER 29, 2026
Why it won’t work.
Why it must work.
Attackers now run AI agents around the clock. The businesses that keep the country running are allowed to patch once a month, at 2 a.m. on a Saturday, if the COO signs off. Why AI-speed defense will hit the corporate immune system, why it has to work anyway, and the law it will take to get there.
RVA Cyber, LLC · Sourced essay and policy proposal
Every scenario step is paired with an incident that has already happened.
LATEST
2026-10-22
Tattoo pigment migrates to lymph nodes, and two Scandinavian studies reported links to lymphoma. A June 2026 meta-analysis of seven studies found no significant association in its main analysis. What the evidence does and does not show.
Read briefing2026-10-21
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution flaws. Attack attempts are now in the millions, and Amazon traced the first one to October 17. Updated October 22 with exploitation timeline, exposure estimates, vendor package status, regressions and reactions.
Read briefing2026-10-19
A sourced review of seven Ukraine-focused House votes by Rep. Rob Wittman, including what each bill or amendment proposed, the Republican vote split, and Wittman’s vote.
Read briefing2026-10-18
How a Houston startup built its business on IBM compatibility, helped shape the PC standard, expanded into enterprise computing, and became part of HP.
Read briefing2026-10-12
An original Polar Noir graphic novel. All fourteen chapters, in three acts, in one reader.
Read briefing2026-10-12
The captive king, the princes held in his place, and Chambord’s wartime role as a refuge for French art—an illustrated, sourced companion to a documentary.
Read briefing2026-10-03
An interactive working-draft family tree for the Staley, Konkle, Cash and Turnes lines: open any person's card for a summary of what the records show, what is still unproved, and links to the evidence.
Read briefing2026-10-03
A working draft of a four-line family history (Staley, Konkle, Cash, Turnes): our best current reading of the records, with every link labeled by how well it is proved, new York County evidence, and the family's route from Dyess, Arkansas, to Albion, Michigan.
Read briefing2026-09-25
A source-backed history of Dyess Colony and the Michigan towns of Albion and Marshall, connecting New Deal farming, Johnny Cash, family migration, industry, preservation and the Purple Gang’s documented Albion chapter.
Read briefing2026-09-25
A revised history of Dyess Colony, Arkansas, and Albion and Marshall, Michigan: a New Deal farm colony, Johnny Cash's boyhood, Albion's foundries and fastener makers, the Purple Gang's Albion years, Marshall's preserved streets, and one family's route north.
Read briefing2026-09-13
A primary-source chronology and comparison of Dario Amodei, Sam Altman, Elon Musk, and Demis Hassabis on who should govern frontier AI.
Read briefing2026-09-09
A national care floor, one public payer, accountable local delivery, and a voluntary path toward personalized medicine.
Read briefing2026-09-05
The agent and integration layers can work. The ownership experiment deserves a pilot. The token protocol is not ready to carry the social contract.
Read briefing2026-08-25
A practical seven-day household checklist for hurricanes, prolonged outages, and economy-disrupting cyberattacks, with direct shopping links and authoritative safety guidance.
Read briefing2026-08-18
A sourced RVA Cyber companion on the cyber-resilience execution layer required by regional inference, shared AI systems, and the Five Reconnectings scenario.
Read briefing2026-08-18
An evidence review finds that a viral post uses many real medical-threshold figures but turns labels, eligibility, and overlapping estimates into a misleading customer-count narrative.
Read briefing2026-08-18
A fact check of Nike's historic drawdown, expanded with a Hold rating and a price-to-earnings comparison across athletic-footwear and apparel peers.
Read briefing2026-08-17
A voluntary public compact for local Continuity Nodes, national defensive intelligence, independent recovery, and accountable Cyber Stewards.
Read briefing2026-08-17
A concise briefing on the AI governance lessons CyberCorps should adopt to keep a powerful autonomous defender accountable, constrained, and under genuine human control.
Read briefing2026-08-16
A writings-only analysis finds a capability-conditioned position: Amodei supports non-dangerous open-weight models, but not an unconditional right to release frontier weights.
Read briefing2026-08-16
A 1972–2025 box-office animation with every displayed gross converted to Jan. 1, 2026 dollars using CPI-U.
Read briefing2026-08-06
A data-backed adversarial debate tests whether AI will make reactive vulnerability management operationally obsolete by February 2028. Persistence won, but the reason matters.
Read briefing2026-08-05
An evidence-first review of five unresolved Staley-family research gaps, the claims the records support, and the boundaries that must govern the next drafting phase.
Read briefing2026-08-04
A review site for the evidence-backed three-act editorial plan for a public Staley family-history paper and private illustrated Book of Life.
Read briefing2026-08-03
Article 50 now turns AI disclosure, machine-readable provenance, and accountable human review into operating controls, not policy language.
Read briefing2026-08-01
A balanced six-day e-bike plan for all 184.5 miles of the C&O Canal Towpath, with five overnight stops, current trail gates and the battery math behind one rustic lockhouse night.
Read briefing2026-08-01
A complete three-day, hotel-first e-bike plan for all 184.5 miles of the C&O Canal Towpath from Georgetown to Cumberland.
Read briefing2026-07-31
A six-day, hotel-first e-bike plan for the C&O Canal Towpath and Great Allegheny Passage from Washington, DC to Pittsburgh.
Read briefing2026-07-31
Draft long-form RVA Cyber analysis comparing the early open source software movement with today’s open model and open-weight movement, and what each reveals about closed systems, leverage, safety, and exit.
Read briefing2026-07-31
A practical, source-aware e-bike mini-site for riding Washington, DC to Pittsburgh on the C&O Canal Towpath and Great Allegheny Passage.
Read briefing2026-07-30
Draft research note: a controlled audit finds a China-specific filtering asymmetry on Kimi K3's direct Moonshot route.
Read briefing2026-07-30
A fun, hotel-first planning mini-site for riding the Great Divide route on a Class 1 e-bike, with map, equipment, power, access, and day-by-day notes.
Read briefing2026-07-30
A decision guide to whether advanced open-weight AI releases should be left open, governed, restricted, or banned—and what each choice puts at risk.
Read briefing2026-07-30
A quick, sourced guide to the five most recent Senate-confirmed leaders of America’s space agency.
Read briefing2026-07-30
A sourced 60-day plan for riding the Great Divide on a Class 1 e-bike—with rooms when possible and a tent when the map wins.
Read briefing2026-07-30
CISA’s new three-day remediation tier is real, but it is driven by exposure and exploitability—not a Critical CVSS label.
Read briefing2026-07-29
RVA Cyber assesses the American Airlines, T-Mobile, Apple TV, Xbox, and PlayStation outages—and separates unresolved technology failures from confirmed cyber disruption.
Read briefing2026-07-29
A like-for-like estimate for serving Kimi K3 to about 100 concurrent users on Azure, AWS, and Google Cloud.
Read briefing2026-07-29
A compact, measurable security standard grounded in 1,000 recent publicly documented incidents.
Read briefing2026-07-28
A Clear Signal edition on evaluative non-closure and a testable Pirsig-inspired program for revising AI objectives.
Read briefing2026-07-28
Nanbeige bets on compact agents. Ternary Bonsai compresses a 27B model. Gemma remains the proven production worker.
Read briefing2026-07-24
A practical, evidence-gated roadmap to the Bright Commons, now defining twelve essential service families and what abundance must deliver for each.
Read briefing2026-07-22
A critical reassessment of AI assistance, automation, learning, and human agency. Revised September 13, 2026, with a narrower causal hypothesis and updated research evidence.
Read briefing2026-07-22
A scholarly account of evaluative non-closure and an unvalidated Pirsig-inspired research program for revising AI objectives.
Read briefing2026-07-22
What the OpenAI–Hugging Face incident means for companies deploying third-party AI against sensitive data—and the controls executives should require now.
Read briefing