Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.

The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays

Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.

AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.

S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.

AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#enterprise security
62 posts

Securing Amazon Web Services
Discover a comprehensive guide to securing your Amazon Web Services environment. This blog post compiles essential tips and resources to protect AWS accounts, EC2 instances, S3 buckets, and more.

ISO 27017: A New Standard to Learn
Explore ISO 27017, a cloud-specific security standard that Amazon Web Services recently adopted. Learn how it complements existing ISO standards and its implications for cloud security practices.

Now Secured By Let’s Encrypt
Discover how Let's Encrypt is revolutionizing web security by offering free SSL certificates, removing financial barriers and ensuring accessible encryption for everyone.

Project: Intrusion Detection
This starts the first in a series of projects you can use to improve your security skills. The ideas of these projects is something…

5 Facts You Need to Know About Cyber Insurance
Uncover the complexities of cyber insurance with insights on policy specifics, exclusions, and understanding risks. This guide empowers you to manage security effectively by demystifying cyber insurance coverage.

On Third Party Security Breaches
Explore the aftermath of the T-Mobile/Experian breach, examining blame dynamics, brand impact, and strategies for mitigating third-party risk. Learn how to protect your company from similar incidents.

What InfoSec Pros Can Learn From Agile
Explore how InfoSec professionals can learn from Agile methodologies to improve security integration in software development, transforming security practices into a more proactive and disciplined approach.

24 Security Things Board of Directors Should Know
Discover 24 essential security insights every Board of Directors should grasp, from understanding vulnerabilities to managing breaches, ensuring they effectively guide their organization's information security.

Why Security Needs DevOps
Explore why embracing DevOps is key for enhancing security, reducing human errors, and minimizing vulnerabilities in application deployment cycles by integrating development, infrastructure, and security.

Security Longreads for August 14, 2015
Dive into the latest Security Longreads, featuring thought-provoking insights on cybersecurity challenges, Oracle's CSO controversy, and a two-year-old automotive vulnerability. Plus, explore engaging reads on conflict aversion and productivity.

Security Longreads for August 7, 2015
Explore the latest in information security with Security Longreads, featuring highlights from Black Hat 2015, FBI's TrueCrypt decryption, and Tesla's quick security patch. Discover engaging reads beyond security too!

On Hacking Guns, Toilets, Semis and More
Explore the sensationalized world of hacking at Blackhat, as we delve into vulnerabilities in smart guns, toilets, and truck tracking systems. Learn to focus on real security risks, not media hype.