Employee-reported threats can reveal security gaps that automated defenses miss, helping organizations identify attack patterns, investigate weaknesses, and strengthen controls. Read more in my latest write-up for SecureWorld. secureworld.io/industry-news…

My new article on SC Media highlights the differences between VM and CTEM in terms of validated prioritization, clear ownership, integrated remediation workflows, and verification that fixes have worked. scworld.com/perspective/5-el…

Organizations can modernize legacy business applications with generative AI without replacing stable, established systems. My new article on CSA looks at integration architectures, data retrieval, and security controls that must accompany this scenario. cloudsecurityalliance.org/bl…

Organizations should take AI claims with a grain of salt, understand a security tool’s limits and operational demands, and prioritize investments that address actual risks. Read more in my new column on SC Media. scworld.com/perspective/why-…

For banks, healthcare providers, and other regulated organizations, data privacy is a core requirement of AI deployment, not something to address after launch. I wrote a column for SC Media about how to avoid regulatory penalties and costly breaches. scworld.com/perspective/why-…

Legacy detection models fail against AI-driven bots that blend into normal traffic patterns, leaving orgs blind to malicious intent. The piece stresses that readiness must be measured by actual protection outcomes rather than installed tools. scworld.com/perspective/79-o…

Security in mobile development is not just about encryption or penetration testing. It requires embedding compliance, secure API practices, and dependency scrutiny into every sprint. Read my new article to learn more. secureworld.io/industry-news…

The recent Foxconn incident demonstrated how supply chain compromises combine data theft with operational disruption. My new column on SC Media focuses on countermeasures for this style of attack. scworld.com/perspective/a-6-…

Frontier AI models offer extraordinary capabilities but cost 10–30 times more per token and introduce latency. Smaller models, paired with strong prompt engineering, often outperform them for focused, high‑volume applications. Read more in my new article: unite.ai/choosing-right-ai-m…

CISOs often confuse visibility with progress, leaving exposures unmanaged between scans. That being said, CTEM only becomes operational when it integrates into ticketing, CI/CD, and incident workflows. scworld.com/perspective/how-…

My new column on SC Media looks at how teams should respond to the Claude Mythos momentum so cybercriminals don't get the upper hand. scworld.com/perspective/6-st…

With virtual desktop set-ups maintaining popularity among organizations, I compiled the ways to protect such ecosystems in 2026, and likely beyond: scworld.com/perspective/seve…

SC Media just posted by new column about a promising approach to securing emissions telemetry data in manufacturing execution systems (MES). scworld.com/perspective/how-…

Prompt injection exploits scarce separation between instructions and data in LLMs, and input filtering can't fully solve it. To address this, regulated industries are increasingly applying defense‑in‑depth principles to AI pipelines. scworld.com/perspective/why-…

The rise of synthetic identity fraud, fueled by deepfake technology, is undermining traditional security checks. My latest article on SecureWorld highlights layered defenses and modern verification strategies to counter these evolving threats. secureworld.io/industry-news…

The piece discusses how AI’s ability to surface vast amounts of potential cyber threats creates a paradox - greater visibility but less clarity of what are real dangers and false positives. Read more if this topic piques your interest. unite.ai/why-ai-is-making-it…

It seems malicious actors are cashing in on hyper-volumetric DDoS attacks that have seen a significant growth since late 2025 and continuing in early 2026. My new column on SC Media explains how orgs can stay safe from this incursion vector. scworld.com/perspective/five…

CSA just posted my new blog that shines a light on the role of micro-segmentation for achieving the efficiency and zero trust based security of physical hosts in large networks. Read this to learn more. cloudsecurityalliance.org/bl…

When it comes to migrating an enterprise infrastructure to the cloud, the shared responsibility model is often the elephant in the room. My new column on SC Media explains why, and how to provide proper cloud security. scworld.com/perspective/why-…

Disaster recovery often implies a systems rollback to an earlier state, but doing so can open old security loopholes. My new column on SC Media explains what these pitfalls are, and how to steer clear of them. scworld.com/perspective/roll…