Insights
Thought leadership themes anchored in executive cybersecurity leadership, resilience, and real incident response experience.
Articles
After the Arrest: What Dubrovsky Changes
ShinyHunters' biggest complaint this year wasn't the FBI. It was a response firm telling victims not to pay. Three weeks after Ed Dubrovsky's arrest, here's what the reporting confirms and what to change before your next incident.
By the Time CISA Says It, You're Late
PHP2Shell went from "no confirmed exploitation" to a CISA deadline in six days. If your patch process waits for that confirmation, the process is the vulnerability.
The Ransom Business Was Built to Leak
The ShinyHunters arrests didn't expose a few bad negotiators. They exposed a model that pays the wrong people for the wrong outcome.
The Private Key Was 4
One of eMudhra's trusted CA private keys was the number 4. Browsers got patched in hours. Everything else just inherited a thirteen-year problem.
The First Shot of the Space War Won't Be a Missile
A Russian military satellite parked 500 metres from a commercial radar satellite feeding Ukraine. The space war's first shot already happened — on the ground.
The Master Key Problem: Why Your MSP's Best Tool Is a Risk to You
Your MSP holds a master key to everything you own. The N-able N-central exploitation is not an N-able story — it's the predictable result of how the managed services model is built.
What Makes a Great MSP?
Every provider can recite the same checklist. The distance between good and great shows up somewhere the checklist doesn't look — and it usually takes three years to find out which one you actually hired.
Why Your Third-Party Risk Program Is a Spreadsheet, Not a Strategy
Most third-party risk programs give organizations a false sense of visibility. They know how many vendors completed questionnaires. They do not know which vendors could take them down.
Core Themes
- The Cyber Resilience Leadership Framework
- What 600+ incident response engagements teach leaders
- The executive role in cybersecurity
- Incident preparedness as a leadership discipline
- Security leadership in the AI era
Featured Concept
The Cyber Resilience Leadership Playbook is a signature thought leadership platform built around lessons from 600+ incident response engagements.