There is a dangerous point at which alarming numbers become familiar enough that we stop reacting to them. Another security advisory. Another critical vulnerability. Another record-breaking Patch Tuesday. We read the headline, forward it to IT, and continue with the…
“Our vendor handles that” should start a conversation….not end it. “We have a vendor handling that.” I have heard that sentence many times over the years. Sometimes it reflects a well-managed partnership. Other times, it leaves an important question unanswered:…
When Enterprise Software Became an Infomercial Remember those infomercials? You’d be half asleep watching television when suddenly someone appeared with a product capable of changing civilization as we knew it. Maybe it sliced tomatoes. Maybe it removed scratches from your…
We Spent 30 Years Securing Users. Now We Have to Secure AI Agents. About a year ago, someone asked me to put together a proof of concept demonstrating what an AI agent could actually do. Not another chatbot. Not something…
Reflections After Black Hat USA and DEF CON 2026 A couple of days ago, while still in Las Vegas, I wrote about returning to DEF CON after many years away and what it was like seeing a community I had…
I Didn’t Discover the Hacker Community at DEF CON. I Watched It Grow Up. Coming back to DEF CON in 2026 after many years away has been a little surreal. I attended several of the early DEF CON conferences… four…
Technology changes every day. Principles don’t. August 2026 Episode… The Locksmith (Why Identity Is the New Front Door) There was a time when securing a business was relatively straightforward. At the end of the day, someone walked through the building.…
Why AI Forces Us to Rethink One of Cybersecurity’s Oldest Assumptions For decades, cybersecurity professionals have relied on a familiar framework when making difficult security decisions. Then, if the business determines the remaining exposure is acceptable, we document the decision…
I’m writing this from a hotel room in Las Vegas while attending Black Hat and DEF CON. Thousands of security professionals from around the world are gathered here to discuss the latest vulnerabilities, zero-day exploits, AI security, ransomware, identity protection,…
Technology changes every day. Principles don’t. July 2026 Episode… Neighborhood Watch (The Original Cybersecurity Team) There was a time, not all that long ago, when security didn’t require artificial intelligence, machine learning, or billion-dollar software platforms. It required Mrs. Henderson.…
