Evidence reviewOct 12, 2026
From today's AI to superintelligence
What has been measured, what has been projected and what has been legislated. Each source is tagged by verification level and no date is promised.
NullGhost Research
What we investigate.
What we learn.
Field observations and industry analysis, with video, charts and a PDF paper. Every figure with its source and its limits.
7studies
14videos (ES and EN)
7PDF papers
NEWDelegation framework · 15 Oct 2026
The AI-enabled vCISO
What gets delegated to an agent, what gets verified and what cannot be delegated. A four-level ladder and a measurement protocol, with explicit sources and limits.
Field observations24 Sep 2026
When the agent decides
Ten lessons on coverage, verification and silent failures from operating an offensive security agent.
Industry analysis24 Sep 2026
The governance gap
Identity, authorization and delegation: questions to ask before putting AI agents into operation.
Architecture evaluation24 Sep 2026
Before execution
A verification layer between an agent’s decision and its action. We examine the pattern through TypeSafe AI / Jev.
FinOps and AI24 Sep 2026
From waste to value
What changes when AI spend enters the FinOps conversation. A reading of State of FinOps 2026.
Market readingSep 25, 2026
The consolidation paradox
More than half say they're consolidating their security stack. 35% will keep their current SIEM regardless. A reading of the 2026 SIEM market.
Key data
The numbers,
with their source.
Every chart uses only figures published in the summary or the paper, with its source and its limits.
Delegation frameworkThe AI-enabled vCISO →
Evidence reviewFrom today's AI to superintelligence →
Field observationsWhen the agent decides →
Industry analysisThe governance gap →
Architecture evaluationBefore execution →
FinOps and AIFrom waste to value →
Market readingThe consolidation paradox →
Library
Papers
in PDF.
Threat Intel
Technical context.
Verifiable sources.
Selected references to understand risk. Applicability depends on your technology, version and configuration.
Linksys — CVE-2025-8821
Command injection affecting Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000. Check the record’s affected products and versions before determining exposure.
Official CVE record ↗Ransomware preparedness and response
A reference for reviewing prevention, preparedness and response. Use it to guide a control review with your team.
CISA — #StopRansomware Guide ↗From analysis to operations
Explore what Kirux can do and define with us what applies to your environment.