Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
The Real AI Risk Hiding in Your Company
78% of CISOs cite AI agent security as their top concern. The danger isn't the model—it's the unsanctioned agent with production access your team built last week.
Recent Essays
Prediction Markets as Insurance: The Kalshi Hedge
A conference used prediction markets to hedge weather risk—turning a speculative exchange into an insurance desk. Here's why it works and what your CFO needs to know.
AI Won't Replace Your Judgment—Just Your Beatmatching
As AI automates technical skills, the real competitive advantage shifts from execution to judgment: knowing which correct answer matters most.
S&P's OpenZeppelin Bet: Risk Rating Meets Smart Contracts
S&P Global's acquisition of OpenZeppelin signals a watershed moment: traditional risk frameworks are now applied to blockchain infrastructure, fundamentally reshaping how institutions evaluate tokenized assets.
AI-Scaled Attacks: Your Risk Model Is Obsolete
Five federal agencies warned of AI-generated exploits targeting industrial systems. The real threat: attackers now scale expertise through automation, invalidating risk models built on scarcity.
#risk management
115 posts
Disrupt Patching
Patching shouldn’t be so hard.
Jay’s 2017 Information Security Predictions
It’s that time of year when security writers across the globe predict what we can expect from information security in the following year…
10 Minute Call with an IRS Scammer
9 = 38am on Friday, the phone rings with a call from Tulsa, OK. I’m not sure I know anyone in Tulsa so I let it go to voicemail. Odd, they…
Why We Will Never Secure The Internet of Things
Explore why securing the Internet of Things (IoT) remains elusive, as most devices, made by unknown manufacturers, lack security measures. Discover the need for universal security standards.
Securing Amazon Web Services
Discover a comprehensive guide to securing your Amazon Web Services environment. This blog post compiles essential tips and resources to protect AWS accounts, EC2 instances, S3 buckets, and more.
ISO 27017: A New Standard to Learn
Explore ISO 27017, a cloud-specific security standard that Amazon Web Services recently adopted. Learn how it complements existing ISO standards and its implications for cloud security practices.
Project: Intrusion Detection
This starts the first in a series of projects you can use to improve your security skills. The ideas of these projects is something…
5 Facts You Need to Know About Cyber Insurance
Uncover the complexities of cyber insurance with insights on policy specifics, exclusions, and understanding risks. This guide empowers you to manage security effectively by demystifying cyber insurance coverage.
Passwords is Everything That is Wrong with Security
Explore why the outdated concept of passwords is failing modern security needs and discover innovative alternatives like token-based authentication that promise a more secure future.
On Third Party Security Breaches
Explore the aftermath of the T-Mobile/Experian breach, examining blame dynamics, brand impact, and strategies for mitigating third-party risk. Learn how to protect your company from similar incidents.
24 Security Things Board of Directors Should Know
Discover 24 essential security insights every Board of Directors should grasp, from understanding vulnerabilities to managing breaches, ensuring they effectively guide their organization's information security.
4 Security Things You Should Know
In the wake of the Ashley Madison breach, discover four crucial security tips to safeguard your digital life, including e-mail practices, using password managers, timely updates, and online privacy awareness.