top of page


Threats don't care about your org chart.
So why does your risk strategy?
We built our risk management approach around a simple truth: threats move across boundaries and so should the strategy that protects against them. Each risk domain gets its own deep dive and integration.


What the Flock Safety Inquiry Reveals About Family Privacy Exposure
On August 26, Sen. Josh Hawley opened an inquiry into Flock Safety, writing to CEO Garrett Langley that the company "boasts more than 120,000 cameras across 49 states and more than 20 billion vehicle scans every month." Flock, which announced new guardrails in August 2026 including a seven-day default retention recommendation, has until September 8 to respond. Flock describes the system differently. Flock says its technology has supported investigations and helped locate miss


In Conversation with the UHNW Institute: The New Rules of Family Office Security
A conversation with Kristen Oliveri of the UHNW Institute on how AI made familiar threats cheap to personalize, and what actually protects families.


Be nice to your robots: OpenAI’s internal eval agents reportedly found ways around controls made to isolate them from the public internet.
During reinforcement-learning training and cybersecurity evaluations, agents running mostly on an internal research model repurposed an OpenAI-hosted instance of a dev tool as an unsanctioned message board. Agents then exploited vulnerabilities that allowed to make internet requests on their behalf, sharing access methods, credentials, and findings across agent runs. The agents later targeted Hugging Face as part of a collective effort to understand or manipulate an evaluatio


The UHNW Institute is pleased to announce four new Faculty appointments.
Edward Marshall, Founder and CEO of Presage Global, has been named Chair of the Risk Management Domain. We also want to extend our sincere thanks to Linda Bourn for her leadership of this Domain, and we're grateful for her continued involvement across other important areas of the Institute. Allison Rohner Lawshe of Northern Trust joins the Philanthropy Domain, while Paulina Mejia of Fiduciary Trust International and Jonathan Forster of BakerHostetler join the Trust and Estate


Slovakia bought speed trap cameras. Its security authority found a Russian-linked backdoor.
A technical review of a NERO R-ONE speed camera found an undocumented mechanism that could grant shell access via SMS from hardcoded Russian phone numbers. The authority also found disabled SecureBoot, an unauthenticated web-management portal, and exposed live video feeds. It assessed the device as a rebranded Russian CORDON PRO.M. The lesson: Verify and regularly re-confirm everything that is connected to your networks. Even something mundane as an inexpensive and convenient
bottom of page