Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#security
142 posts
Keep It Simple
I had the privilege of hearing Harry Kraemer, former CEO of Baxter, present on leadership. One of his key tenets is Keeping Things Simple, and it applies directly to how security professionals sell security to the organization.
Bring Your Own PC
A common topic in companies lately has been Bring Your Own Device, and we usually think mobile. But the New York Times highlights another growing area: Bring Your Own Computer.
The Journal Report on Information Security
The Wall Street Journal today dedicated their Journal Report to Information Security, with excellent coverage of topical and understandable articles around information security, social engineering, and incident response.
NYT on US Government Identities
The New York Times has a good background piece on the NSTIC proposal for online identities. There will never be a government-sponsored identity program that makes everyone happy, but perfect or not, it's a great start.
Tracking Criminals' Cell Phones With a Stingray
There was an interesting article in today's Wall Street Journal about the legal implications of police using a device called a stingray to find people. Stingrays are one of several new technologies used to track locations, often without a warrant.
The Cloud is More Secure Than You
I was reading an interview with FEMA CIO Richard Spires on his aggressive approach to moving US infrastructure to the cloud. I'm often asked whether cloud computing is secure enough for a company.
Give Me My Corporate E-Mail on My Device
I've spent a lot of time talking to clients about allowing employees to receive corporate e-mail on their personal devices. I was pleased to read an article outlining how Ford Motor Company allows employees to bring their own device.
58% of Companies Block Access to Social Media Sites
I recently posted about the benefits of not blocking access to social media websites on the corporate network. Then I picked up an article on the percentage of companies who do.
Web Surfing Helps at Work
The Wall Street Journal published a piece on how using the Internet for non-business purposes increases productivity. As security professionals, we are usually in the business of locking employees down, but those time wasters could make them more productive.
My Day Off Of The Internet
On Father's Day this year, I decided to take a day off from the internet. I got the idea from Phil Cooke's Reconnect to Disconnect campaign, and since it was my first Father's Day, it was a great time to experiment.