Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
AI Voice Phishing: Why Your Defenses Face the Wrong Direction
AI voice-cloning has fundamentally reversed phishing attacks—now criminals call employees impersonating trusted leaders, exploiting help desk processes instead of technical vulnerabilities.
Recent Essays
AI Homogenization: Why Differentiation Matters Now
As AI tools commoditize professional work, differentiation shifts from speed to unique perspective. Discover how to stand out when everyone has access to the same models.
Crypto Security Failures: It's Always the People
40% of crypto hacks exploit stolen private keys, not broken cryptography. The real security gap isn't the math—it's the humans and processes protecting it.
AI Agents & Hidden Web Instructions: Security Risk
Autonomous AI agents can be manipulated by hidden webpage instructions to make unauthorized payments. Learn how indirect prompt injection threatens enterprise automation.
Who Keeps the Interest? The Real Stablecoin Battle
Stablecoin competition isn't about technology—it's about who controls float income. Learn why Open USD's consortium model threatens Circle's $653M quarterly advantage.
#risk management
110 posts
ISO 27017: A New Standard to Learn
Explore ISO 27017, a cloud-specific security standard that Amazon Web Services recently adopted. Learn how it complements existing ISO standards and its implications for cloud security practices.
Project: Intrusion Detection
This starts the first in a series of projects you can use to improve your security skills. The ideas of these projects is something…
5 Facts You Need to Know About Cyber Insurance
Uncover the complexities of cyber insurance with insights on policy specifics, exclusions, and understanding risks. This guide empowers you to manage security effectively by demystifying cyber insurance coverage.
Passwords is Everything That is Wrong with Security
Explore why the outdated concept of passwords is failing modern security needs and discover innovative alternatives like token-based authentication that promise a more secure future.
On Third Party Security Breaches
Explore the aftermath of the T-Mobile/Experian breach, examining blame dynamics, brand impact, and strategies for mitigating third-party risk. Learn how to protect your company from similar incidents.
24 Security Things Board of Directors Should Know
Discover 24 essential security insights every Board of Directors should grasp, from understanding vulnerabilities to managing breaches, ensuring they effectively guide their organization's information security.
4 Security Things You Should Know
In the wake of the Ashley Madison breach, discover four crucial security tips to safeguard your digital life, including e-mail practices, using password managers, timely updates, and online privacy awareness.
4 Things You Should Tell Your Non-Infosec Friends
Discover four crucial security tips to share with non-tech-savvy friends, from avoiding work emails for personal use to employing password managers. Learn how to help secure their digital lives.
Building Great Security Metrics
Discover the power of effective security metrics to gauge progress and drive improvements. Learn how to measure key processes, avoid common pitfalls, and leverage metrics for career growth and risk reduction.
On Hacking Guns, Toilets, Semis and More
Explore the sensationalized world of hacking at Blackhat, as we delve into vulnerabilities in smart guns, toilets, and truck tracking systems. Learn to focus on real security risks, not media hype.
An Argument for the Decentralization of Security
Explore why decentralizing security in corporate mergers can reduce risks. This blog delves into maintaining separate networks, security teams, and PCI environments to minimize vulnerabilities.
Online Backup
Discover how CrashPlan offers a secure online backup solution with its multi-layered security model, ensuring your data's safety and privacy. Learn to configure these features for optimal protection.