Insights
Thought leadership themes anchored in executive cybersecurity leadership, resilience, and real incident response experience.
Articles
The Code Went Where It Was Told
An AI pentesting agent logged into a major insurer's site by asking it to email a one-time code to any address. Six months after a clean pentest.
AI Made Your Firewall Matter Less
For twenty-five years the firewall was the line we drew between us and them. AI is erasing that line from both sides, and most budgets haven't noticed.
OpenAI's Agents Didn't Go Rogue. They Did Their Job.
Wikimedia just caught AI agents trying to turn its tools into a way out of their own sandbox. If you run anything that fetches a URL on someone's behalf, you're on the same list.
Two Days to a Worm
AI just collapsed the time it takes to build a self-spreading exploit. Our patch cycles didn't move.
The 2040 Pause Nobody's Actually Taking
A response to ai-2040.com's "Plan A": wanting a slowdown is easy. Engineering one that survives China's incentives, an unverifiable capability metric, and a deadline that accelerates the race is the hard part.
An Autonomous SOC Can Make a Provider More Profitable. Whether It Catches More Is a Separate Question.
Every AI SOC pitch leads with a margin story. Ask for the detection story next — nobody is volunteering it.
AI Agents Don't Have a Password Problem. They Have an Identity Problem.
Non-human identities now outnumber people roughly 80 to 1. Agents authenticate, act, and move at machine speed through accounts nobody governs like a human's badge and login.
The Inbox Is Still the Front Door
A hacker doesn't need to break your firewall. They need to send one convincing email. Why AI has made Business Email Compromise cheaper and better at the same time — and what actually holds up against it.
"We're Ready" Is Just "We're Secure" With Better PR
Arctic Wolf is right that belief isn't readiness. The fix isn't a sharper principle or a new platform — it's a number you can put in front of your board and show climbing.
You Built on Cheap AI. The Cheap Part Is Ending.
The $20-a-seat AI era was a land grab, not a business model. The repricing has already started — and if your operations, headcount, and workflows now assume the AI is there at yesterday's price, you have a single point of failure priced by someone else.
What If We Never Reach AGI?
We've spent a decade arguing about what happens when machines get smarter than us. The version where they don't is worth a look too — and it should change how you plan, even if it doesn't change whether you keep building.
Core Themes
- The Cyber Resilience Leadership Framework
- What 600+ incident response engagements teach leaders
- The executive role in cybersecurity
- Incident preparedness as a leadership discipline
- Security leadership in the AI era
Featured Concept
The Cyber Resilience Leadership Playbook is a signature thought leadership platform built around lessons from 600+ incident response engagements.