History teaches us that empires rarely collapse from a single battle. The Roman Empire did not fall overnight, it crumbled under years of pressure, compounded by one weakness after another, until the final blow came. In cybersecurity, many companies are…
Every week, I get a few messages from people eager to break into cybersecurity. The question is usually the same… “Where do I start?” They expect me to say certifications, or expensive courses, or maybe the name of the latest…
Beyond the Firewall… How Lateral Movement Now Lives in Your Integrations When news breaks of yet another big breach, the headlines usually stop at “what was stolen” and “who was hit.” But the Salesforce / Salesloft-Drift breach is different. This…
While on a recent advisory board Zoom call, one of the topics we tackled was the rapidly changing regulatory and policy landscape in cybersecurity. What stood out to me is how quickly the ground is shifting beneath us, and how…
For decades, Excel has been the gold standard for precision. Whether crunching financial reports, managing budgets, or building data models, users expect formulas to behave deterministically, 2 + 2 always equals 4. Microsoft’s latest move challenges that assumption by embedding…
Every device connected to a network leaves behind subtle digital traces. Just as detectives use fingerprints to identify suspects, attackers use network fingerprinting to identify operating systems, services, and vulnerabilities on their targets. Understanding what fingerprinting is, and how to…
While reading through the latest developments at the intersection of law and cybersecurity, I found myself drawn to one theme that seems to be accelerating faster than most–> the courtroom fallout from data breaches. It’s not just regulators and compliance…
Artificial Intelligence has become a cornerstone of modern business, from copilots that write code to predictive engines that optimize supply chains. But as defenders race to integrate AI into their security stacks, attackers are preparing to do the same, with…
Most people don’t get excited about SSL/TLS certificates. They’re the quiet little digital passports that let your browser trust a website, light up that comforting padlock, and keep data flowing securely. But in 2026, two huge changes are coming that…
We’ve mastered securing human identities… passwords, MFA, SSO, zero trust. But what happens when the “user” isn’t a person? Autonomous AI agents are already logging in, making API calls, and moving data across environments. They’re becoming first-class identities inside our…
