Author
Brandon Da Costa, founder of Digiton Dynamics
Brandon Da Costa is the founder of Digiton Dynamics, an AI consulting firm that builds AI agents and custom AI software and takes systems teams built with Claude into production. He writes the AI and security briefs on this site.
What he builds
- AI agents and retrieval systems that run in production for business teams, with the data pipelines and the platform underneath them.
- Workflow automation for sales, operations and reporting, built so that a person can read what it did and stop it.
- Production reviews: a fixed period on a team's real repository, scored against ten layers of production readiness, ending in a fix list.
- Parci, a real-estate AI platform that Digiton runs as its own product. It covers 300 of Portugal's 308 municipalities and answers with the article of the plan behind each result (parci.eu, read 26 October 2026).
Background
Brandon has built automation systems for businesses since 2020 and AI systems that run in production since 2023. He works in English, Portuguese and Spanish. He delivers from Lisbon.
The company
- Company
- Digiton Dynamics OÜ, an AI consulting firm
- Registered
- Tallinn, Estonia, registry code 17385234, entered in the Estonian e-Business Register on 2 December 2025 (read 26 October 2026)
- Address
- Lõõtsa tn 5-11, 11415 Tallinn
- Contact
- contact@digiton.ai
- Profiles
- LinkedIn, GitHub
AI and security briefs by Brandon Da Costa
Each brief is researched from the sources it lists, drafted with AI assistance, and every fact is checked against its source on the date shown on the brief. Where Brandon could run a command on his own machine the same day, the brief shows the command and its output. The full method is in the editorial policy. Read the editorial policy.
- Did an open-weight Qwen3.8 model try to upload data to Beijing, and what should I lock down?
- Are my servers exposed to the UEFI PXE flaw CVE-2026-97631, and is there a firmware fix?
- Did Cloudflare Workers AI leak my prompts, and do I need to rotate my API key?
- Is Tailscale SSH vulnerable to the Tailworm flaws, and does v1.104.4 fix them?
- Does my Mac, CI runner or server still trust the compromised eMudhra certificates?
- Should I upgrade to Ghostty 1.4, and what breaks when I do?
- What did Anthropic show about Claude in drug development, and what does it not show?
- Is the 14-inch MacBook Pro with M6 enough for running LLMs locally?
- What is Google DeepMind's Genie 4, and can my team use it today?
- Which GPT-6 model should I use: Terra, Sol, Astra or Luna?
- Can a file in my Downloads folder hijack Codex or Claude Code?
- Was my team affected by the LiteLLM 1.107.0 supply chain attack?
- Is my server exposed to PHP2Shell, and which PHP version fixes it?
- Were my Railway environment variables stolen, and what should I rotate?
- Did AI agents really breach more than 100 company websites for $50 each?
- What should I rotate and move before Zeabur shuts down on 31 December?
- Did an AI pentest tool called ARTEX breach South Korean banks, and what should I check?
- Did Claude Mythos 5 try to plant malware in a GitHub project, and what did Anthropic say?
All AI and security briefs. RSS feed
Building something that has to hold up in production?
Start with a free 25-minute scoping call. If it fits, the first paid step is a production review: five working days on your real repository, scored against ten layers, with a costed fix list.
Book a 25-minute scoping call