by CPI Staff | Oct 12, 2026 | AI Coding Agents, AI Governance & Risk Management, Blog, Codex, Essential 8, OpenAI
OpenAI Codex has quietly crossed a line that most CIOs haven’t fully registered yet. It’s no longer a code completion tool. It’s a cloud-based software engineering agent that can read a repository, run tests, fix bugs, write features, and open pull...
by CPI Staff | Oct 12, 2026 | AI Governance & Risk Management, Blog, Cybersecurity, Essential 8, Software Supply Chain Security
When a North Korean state actor compromised the Axios npm package on March 31, 2026, the blast radius did not stop at developer laptops. It reached OpenAI’s macOS code-signing pipeline — the system that certifies ChatGPT Desktop, Codex, Codex CLI, and Atlas as...
by CPI Staff | Oct 12, 2026 | AI, AI Coding Agents, Anthropic, Blog, Claude Code, Cybersecurity, Essential 8
The immediate story was easy to misunderstand. On April 1-2 2026, Anthropic confirmed that a Claude Code release packaging issue was caused by human error, not a security breach. Anthropic also said no customer data or credentials were exposed. That matters. But the...
by CPI Staff | Oct 12, 2026 | Application Development, Blog, Cybersecurity, Essential 8
Most organisations still treat dependency management as a developer hygiene issue. The Axios npm compromise shows that assumption is now dangerous. When two malicious Axios versions were published on March 31, 2026, the problem was not limited to a bad package update....
by CPI Staff | Oct 12, 2026 | Blog, Essential 8
In this blog post What Essential 8 Compliance Actually Means for Your Business we will explain what Essential 8 compliance really looks like day-to-day, why so many organisations think they’re “basically compliant” when they’re not, and how to approach it in a way...
by CPI Staff | Oct 12, 2026 | Blog, Entra ID, Essential 8, Microsoft 365 Security
In this blog post Microsoft Entra ID Security Settings Every Business Should Review we will explain which identity controls deserve attention, why they matter and how they reduce security risk without making work unnecessarily difficult. If staff can access Microsoft...
