Chris Morales

CISO, Security Strategist & Advisor

Chris Morales has been living and breathing cybersecurity for over two decades. As a threat modeling expert and an active voice in the infosec community, he has spent his career designing incident response and threat management programs for some of the world's largest enterprises. Currently, he’s the CISO and Head of Security Strategy at Netenrich, where his focus is on scaling operations securely and protecting supply chains from adversarial attacks.

Chris’s career has taken him all over the map-literally. He started out in Atlanta, spent time in London, Los Angeles, and Austin, and now calls the San Francisco Bay Area home. Building security programs across these diverse global tech hubs has given him a unique, boots-on-the-ground perspective on different corporate cultures and global security challenges. He knows firsthand that effective cybersecurity has to be adaptable and make sense for the business, no matter where it operates.

If you catch Chris on a podcast or reading his industry interviews, you’ll quickly learn he’s not a fan of the old-school "prevention-only" mindset. Instead, he’s all about Autonomic Security Operations (ASO) and taking a proactive, shift-left approach to build real, dynamic business resilience.

Before joining Netenrich, Chris led advisory services and security analytics at Vectra AI, where he helped organizations break down advanced threat vectors. Over the years, he’s worn a lot of hats - spanning security engineering, consulting, architecture, and research, with leadership stops at heavy hitters like IBM, McAfee, Accuvant, 451 Research, NSS Labs, and HyTrust.

When he's not navigating the latest cyber threats from the Bay Area, Chris is focused on giving back to the tech community, which includes his ongoing work as an advisory board member for Saporo.

3 min read

My Foolproof Guide to Ruining Your Security Operations Center (in 5 Easy Steps)

By Christopher Morales, CISO and Head of Security Strategy, Netenrich

I’ve spent enough time in this industry to see a lot of "innovative" approaches...

Agentic SOC

KEEP READING

Agentic SOC: The New Economics of Security Operations

4 min read

Agentic SOC: The New Economics of Security Operations

I’ve been in this game for over two decades, and if there’s one thing that...

Agentic SOC

KEEP READING

4 min read

Intent Based Security: The Cultural Shift in SOCs

Oct 22, 2026 by Raju Chekuri

This is the final post in a 25-week series on data science and the future of...

3 min read

A Letter to Those Choosing a Trusted Security Vendor

Oct 20, 2026 by Raju Chekuri

I want to write this post differently from the others in this series - not as...

3 min read

Probabilistic Security & Attack Path Management

Oct 15, 2026 by Raju Chekuri

Adversary path modeling is the capability that most directly embodies...

10 min read

Payment API Abuse: How AI Turns Leaked Keys Into Payouts

Nov 6, 2026 by Ganesh Sunkari

How AI agents are finding exposed credentials and forgotten APIs at machine...

10 min read

Nobody Hacked the NBFCs. Their Own Systems Approved the Heist.

Nov 5, 2026 by Netenrich

RBI now wants banks to prove their API controls work in practice, not just on...

11 min read

AI Is Exploiting Web Apps in Hours. Are You Seeing It?

Nov 3, 2026 by Ganesh Sunkari

How AI is driving a surge in web application attacks, and why proving detection...

12 min read

php2shell leaked before the patch. Here’s how to close the gap.

Oct 22, 2026 by Ganesh Sunkari

Most critical vulnerabilities need something to line up before they become...

19 min read

Third-Party Supply Chain Attacks: Securing Identity & MSPs

Sep 8, 2026 by Asritha Narina

Executive Summary

Modern enterprises rely heavily on third-party SaaS...

19 min read

Subverting the Source: Source Code & Software Production Attacks

Aug 21, 2026 by Asritha Narina

NOTE

Part 1 covered core supply chain concepts; Part 2 analyzed npm dependency...

As seen on