2 min read
How Continuous Security Monitoring Exposes Blind Spots
There is a framework for thinking about what you know and don't know about the security state of your environment that I find consistently useful. It...
KEEP READING
7 min read
CI/CD Pipeline Hijacking: 5 Attack Vectors & Threat Hunting
Deconstructing automated build runner exploitation, real-world case studies,...
3 min read
LLM Grounding: Why RAG Transforms Enterprise AI Security
The most common failure mode I observe in LLM deployments for security...
2 min read
Cybersecurity Partners: Building Trust & Shared Value
I want to use this post to say something I do not say publicly often enough.
5 min read
Deconstructing npm Registry & Supply Chain Attacks | Netenrich
Modern JavaScript/TypeScript development relies on composing applications...
2 min read
AI Governance in Security: Human In or On the Loop
"Human in the loop" appears in virtually every AI governance in security...
3 min read
What AI Agents Taught Me About the Autonomous SOC
When I talk about agentic AI and the path toward an autonomous SOC at...
Subscribe for updates
The best source of information for Agentic SOC and Cyber Risk Operations best practices. Join us.
