Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
AI Voice Phishing: Why Your Defenses Face the Wrong Direction
AI voice-cloning has fundamentally reversed phishing attacks—now criminals call employees impersonating trusted leaders, exploiting help desk processes instead of technical vulnerabilities.
Recent Essays
AI Homogenization: Why Differentiation Matters Now
As AI tools commoditize professional work, differentiation shifts from speed to unique perspective. Discover how to stand out when everyone has access to the same models.
Crypto Security Failures: It's Always the People
40% of crypto hacks exploit stolen private keys, not broken cryptography. The real security gap isn't the math—it's the humans and processes protecting it.
AI Agents & Hidden Web Instructions: Security Risk
Autonomous AI agents can be manipulated by hidden webpage instructions to make unauthorized payments. Learn how indirect prompt injection threatens enterprise automation.
Who Keeps the Interest? The Real Stablecoin Battle
Stablecoin competition isn't about technology—it's about who controls float income. Learn why Open USD's consortium model threatens Circle's $653M quarterly advantage.
#security
142 posts
Keep It Simple
I had the privilege of hearing Harry Kraemer, former CEO of Baxter, present on leadership. One of his key tenets is Keeping Things Simple, and it applies directly to how security professionals sell security to the organization.
Bring Your Own PC
A common topic in companies lately has been Bring Your Own Device, and we usually think mobile. But the New York Times highlights another growing area: Bring Your Own Computer.
The Journal Report on Information Security
The Wall Street Journal today dedicated their Journal Report to Information Security, with excellent coverage of topical and understandable articles around information security, social engineering, and incident response.
NYT on US Government Identities
The New York Times has a good background piece on the NSTIC proposal for online identities. There will never be a government-sponsored identity program that makes everyone happy, but perfect or not, it's a great start.
Tracking Criminals' Cell Phones With a Stingray
There was an interesting article in today's Wall Street Journal about the legal implications of police using a device called a stingray to find people. Stingrays are one of several new technologies used to track locations, often without a warrant.
The Cloud is More Secure Than You
I was reading an interview with FEMA CIO Richard Spires on his aggressive approach to moving US infrastructure to the cloud. I'm often asked whether cloud computing is secure enough for a company.
Give Me My Corporate E-Mail on My Device
I've spent a lot of time talking to clients about allowing employees to receive corporate e-mail on their personal devices. I was pleased to read an article outlining how Ford Motor Company allows employees to bring their own device.
58% of Companies Block Access to Social Media Sites
I recently posted about the benefits of not blocking access to social media websites on the corporate network. Then I picked up an article on the percentage of companies who do.
Web Surfing Helps at Work
The Wall Street Journal published a piece on how using the Internet for non-business purposes increases productivity. As security professionals, we are usually in the business of locking employees down, but those time wasters could make them more productive.
My Day Off Of The Internet
On Father's Day this year, I decided to take a day off from the internet. I got the idea from Phil Cooke's Reconnect to Disconnect campaign, and since it was my first Father's Day, it was a great time to experiment.