Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.

The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays

Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.

AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.

S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.

AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#compliance
89 posts

Security Longreads for August 7, 2015
Explore the latest in information security with Security Longreads, featuring highlights from Black Hat 2015, FBI's TrueCrypt decryption, and Tesla's quick security patch. Discover engaging reads beyond security too!

The Only Security Certifications You Actually Need
Discover which security certifications truly boost your job prospects. Focused on employer demand, this guide highlights the essential CISSP and CISA for security and audit roles.

An Argument for the Decentralization of Security
Explore why decentralizing security in corporate mergers can reduce risks. This blog delves into maintaining separate networks, security teams, and PCI environments to minimize vulnerabilities.

Security Longreads for July 24, 2015
Dive into July 24, 2015's Security Longreads, featuring in-depth insights on cryptographic backdoors, Jeep hacking, overhyped cyber threats, and Twitter's security strategies, plus other intriguing topics.

Security Longreads for July 17, 2015
Explore the latest in security with insights on stolen fingerprints, the rising role of Chief Security Architects, and the US government's hiring challenges, plus why productivity myths and gadgets might be overrated.

Security Longreads for July 10th, 2015
Explore the week's top security stories, including government encryption access issues and a hacking firm's breach. Dive into Symantec's insights on hacker motives and the Mob's tech use, plus a sales analysis.

What Does China Want With…
Explore the hidden motivations behind major security breaches like Anthem and OPM. Discover how stolen personal data can be used for competitive advantage and marketing, and why it's crucial to protect all data.

Security Longreads for June 5, 2015
Dive into this week's Security Longreads, exploring the OPM breach linked to Anthem, Netflix's security in agile development, insights on the CISO's role, and a review of Google Photo's data-mining features.

14 Things and 12 Tools Every Security Organization Should Own
Explore the essential disciplines and tools every security organization needs. This guide broadens your security knowledge and helps you understand how various elements fit together for a cohesive strategy.

RSA: Are We Talking About The Right Things?
RSA's focus misses the mark, overlooking key issues like nurturing security talent, expanding the workforce, and measuring program effectiveness. Let's reshape the conversation for next year's event.

How We End Up With Too Many Security Policies
Explore the pitfalls of policy bloat in security management, as the article delves into redundant policies, misplaced guidelines, and tech-enforced rules, advocating for streamlined security measures.

You Have Too Many Security Policies
Explore the pitfalls of excessive security policies that prioritize compliance over true protection. Discover how simplifying and reducing policies can enhance your organization's security posture.