Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#security
142 posts
How Can I Help You?
Explore insights from the "How Can I Help You?" survey, revealing trends in security careers and reader demographics. Discover how a revamped assessment now tailors learning paths for aspiring professionals.
How To Move From Development to Security
Discover how developers can transition into the thriving field of application security with this guide. Learn essential skills, explore the OWASP Top 10, and find resources to enhance your security mindset.
Why We Will Never Secure The Internet of Things
Explore why securing the Internet of Things (IoT) remains elusive, as most devices, made by unknown manufacturers, lack security measures. Discover the need for universal security standards.
ISO 27017: A New Standard to Learn
Explore ISO 27017, a cloud-specific security standard that Amazon Web Services recently adopted. Learn how it complements existing ISO standards and its implications for cloud security practices.
InfoSec Does Time Management Wrong
Discover why traditional time management in IT and InfoSec falls short and learn how the "multiplier effect" can transform your workflow, boost productivity, and empower your team for long-term success.
Reader Mailbag: Join a Big Consulting Firm?
Explore the dilemma of joining a big consulting firm versus staying independent in infosec. Weigh the benefits of specialization and exposure at giants like KPMG against the freedom of solo consulting.
Now Secured By Let’s Encrypt
Discover how Let's Encrypt is revolutionizing web security by offering free SSL certificates, removing financial barriers and ensuring accessible encryption for everyone.
Project: Intrusion Detection
This starts the first in a series of projects you can use to improve your security skills. The ideas of these projects is something…
Passwords is Everything That is Wrong with Security
Explore why the outdated concept of passwords is failing modern security needs and discover innovative alternatives like token-based authentication that promise a more secure future.
On Third Party Security Breaches
Explore the aftermath of the T-Mobile/Experian breach, examining blame dynamics, brand impact, and strategies for mitigating third-party risk. Learn how to protect your company from similar incidents.
What InfoSec Pros Can Learn From Agile
Explore how InfoSec professionals can learn from Agile methodologies to improve security integration in software development, transforming security practices into a more proactive and disciplined approach.
Top 5 Security Career Struggles
Explore the top 5 struggles in security careers, from being a "one trick pony" to misdirected anger, and discover actionable solutions to overcome these hurdles for growth and success.