Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#security
142 posts
My New Book Is Out (and it’s free)
Discover invaluable career guidance in my new book, "Building A Life and Career in Security," available for free this week on Amazon. Learn how to kickstart and elevate your career with ease!
Building a Life and Career in Security - Jay Schulman
As I’ve looked at my own path and helped others along their journey, there is a framework for success in information security.
On Writing A Security Book
Discover the journey behind writing "Building a Life and Career in Security," a new book offering insights and advice on advancing your information security career. Join the conversation on career growth!
4 Security Things You Should Know
In the wake of the Ashley Madison breach, discover four crucial security tips to safeguard your digital life, including e-mail practices, using password managers, timely updates, and online privacy awareness.
4 Things You Should Tell Your Non-Infosec Friends
Discover four crucial security tips to share with non-tech-savvy friends, from avoiding work emails for personal use to employing password managers. Learn how to help secure their digital lives.
The 14 Best YouTube Videos to Grow Your Security Career
Discover the top 14 YouTube videos to enhance your information security career, covering foundational skills, security metrics, management, application security, and awareness in quick, engaging formats.
Why Security Needs DevOps
Explore why embracing DevOps is key for enhancing security, reducing human errors, and minimizing vulnerabilities in application deployment cycles by integrating development, infrastructure, and security.
Security Longreads for August 14, 2015
Dive into the latest Security Longreads, featuring thought-provoking insights on cybersecurity challenges, Oracle's CSO controversy, and a two-year-old automotive vulnerability. Plus, explore engaging reads on conflict aversion and productivity.
Building Great Security Metrics
Discover the power of effective security metrics to gauge progress and drive improvements. Learn how to measure key processes, avoid common pitfalls, and leverage metrics for career growth and risk reduction.
Security Longreads for August 7, 2015
Explore the latest in information security with Security Longreads, featuring highlights from Black Hat 2015, FBI's TrueCrypt decryption, and Tesla's quick security patch. Discover engaging reads beyond security too!
The Only Security Certifications You Actually Need
Discover which security certifications truly boost your job prospects. Focused on employer demand, this guide highlights the essential CISSP and CISA for security and audit roles.
On Hacking Guns, Toilets, Semis and More
Explore the sensationalized world of hacking at Blackhat, as we delve into vulnerabilities in smart guns, toilets, and truck tracking systems. Learn to focus on real security risks, not media hype.