Victoria Robinson

What can possibly go wrong? Cybersecurity awareness month: 👇

AI Cyber Podcast is back! My guest this week, used to submit 10 to 20 bugs in a good month. Her AI research system found 195 in 3 weeks, more than her entire manual bug bounty career. Most of them were in software with no bounty program, which means nobody paid her for a single one. Funny thing is, @Thezinnekalu was enrolled in medical school but training to be a medical wasn’t going well for her. So she quit! However, she loved her time at a four-week Microsoft program on Linux and also enrolled and graduated from the CyberGirls Fellowship hoping to kickstart her career in #cybersecurity. However, she hit another snag when she couldn’t land a job. So Ezinne Kalu started finding vulnerabilities in other people's software to prove she was a great talent. 4 years later she now runs what she calls a one-lady security lab and holds assigned CVEs. In this episode of AI Cyber podcast, Ezinne Kalu walks us through her vulnerability research system; Claude Code as the harness, a second brain built from Andrej Karpathy's pattern, everything stored in GitHub and managed in Obsidian. She discussed her first assigned CVE; CVE-2026-79653 which is a path traversal in Eclipse SW360, software running inside more than 30,000 organisations including Siemens. It allowed arbitrary file write with system privileges, which means remote code execution. It had been sitting in the code for at least six released versions. Ezinne Kalu found it, reported it, and it is now patched. She also shares how she runs her AI research system cheaply with six practical tips for anyone building this themselves. She said her system now produces more findings than she can personally disclose….isn’t that mind blowing?! So what happens when the constraint on security research moves from finding bugs to reporting them, and what does that means for every maintainer about to receive a flood of reports that are not AI slop? Don’t miss this week’s episode of AI Cyber Podcast for any reason! Subscribe to our channel on YouTube and turn on notification. youtube.com/@aicybermagazine…

Nigeria has become cloud-first or cloud-by-default! This policy mandates every Ministry Department and Agency (MDAs) designing digital systems, to do cloud deployment. Infact, for MDAs to opt now of cloud deployments, they'll need a published, time-bound exemption, assessed by NITDA against published criteria and recorded in a public register.

Nigeria has recently unveiled a National Digital Cloud Policy with $750Million expected to be invested over the next 24 months. We should all be paying attention! I have read it in detail and will be sharing in a 3-5 part series, what the policy actually does, what can go wrong from a cybersecurity stance, the opportunities for Nigerians and the talent Nigeria needs urgently. This is part 1 - what the policy actually does.

Remember my post about the new program? It's time... We ( @cybersafehq) are collaborating with @SANSInstitute for this one; and if you meet the eligibility criteria, you don't want to sleep on it! Catch up with the details in the video

AI isn’t inventing new vulnerabilities, it’s multiplying the old ones. In this episode of AI Cyber Podcast, Roeland Delrue explains that LLM agents are trained on human mistakes, so they replicate them faster, producing larger, harder-to-review pull requests that amplify supply chain risks. Watch the full chat on @aicybermagazine👇 youtu.be/N-b-050MQr4

Technology-assisted violence against women is on the rise. So we chose to do something about it. Yesterday, in celebration of international women’s day, we launched SafeHerClinic, an initiative of CyberSafe Foundation. @cybersafehq Visit our website to learn more. safeherclinic.org

Here is an uncomfortable truth about the AI security space right now: The MCP attack surface is so wide and the only way to truly understand it is to collaborate, test, and share findings with other professionals. Comment "Zack" and I will send you the link to the full chat with @ZackKorman on @aicybermagazine's AI Cyber Podcast.

Several organizations are embracing MCP, but its deepest security flaws are dangerously overlooked. In this conversation with @ZackKorman, CTO of a high-growth AI security startup, we discussed the uncomfortable truths behind MCP security and why he believes the protocol is fundamentally flawed. We also discussed the dangers of “prompt injection as a service,” the risks of malicious MCP servers, and why developments like NPM-enabled integrations could be a horror story in the making. The full chat is live on AI Cyber Magazine's YouTube Channel. Watch it using the link: youtu.be/6kIDUyD_Mj0?si=LkSz… .

On last week’s episode of AI Cyber Podcast, I (@aicybermagazine) had an engaging conversation with Mastercard’s @dralissajay about the future of digital trust. Comment “Dr. Jay” and I’ll send you the YouTube link to watch this episode of AI CYBER Podcast.

The @aicybermagazine winter 2026 issue goes live in 24 hours and echoing the feedback from our contributors, who’ve received early access, this is an “insightful and forward-thinking publication. In this issue, we introduced a new column; The Expert Panel series. Collaborating with 30+ cyber leaders across 4 continents, for this, was hard work but absolutely worth it! In our winter issue, we have 3 of these expert panels. So I’m going to hold your hands when I say this…. Whatever you do, make sure you read all 3 of them! If you’re a cyber leader interested in being part of an expert panel in our next issue, please send a message to me or our official social channels.

The World Economic Forum called and I answered! Happy to share that I’ll be speaking at Defending Against Tomorrow’s Cyber Threats! Make sure to attend on Linkedin, on February 9. I will be speaking alongside other global experts including; - Deputy Director-General for Communications Networks, Content and Technology, European Commission Despina Spanou - Director, Cybercrime Directorate, INTERPOL, Neal Jetton Moderated by:  Akshay Joshi, Head of the Centre for Cybersecurity, World Economic Forum Together, we’ll explore the risks, realities, and leadership decisions shaping the cyber frontiers.