Archive - Assume breach

Why Vulnerabilities Are Only the Tip of the Cybersecurity Iceberg

Vulnerabilities are not the real enemy

Sep 3, 2023 •

August 2023

Managing SaaS Security Risks: Beyond Compliance and Into Reality

Security is not a tax

Aug 23, 2023 •

May 2023

My new book Blitzscaling Security is now available.

The wait is over!

May 8, 2023 •

April 2023

Unquestioned Practices, Hidden Costs

Misconceptions and what not

Apr 16, 2023 •

March 2023

Unmasking the Real Threat in the LastPass Saga

Why BYOD policies aren't the answer to your security woes

Mar 19, 2023 •

The concept of unlimited responsibility

The winning strategy in Security

Mar 12, 2023 •

December 2022

Why so many companies suck at security

It all comes down to two points

Dec 17, 2022 •

November 2022

Security Operations Center (SOC) - When detection is not enough

A Security Operations Center (SOC) is often composed of a team of dedicated analysts that hawkishly monitor everything happening within the…

Nov 26, 2022 •

October 2022

September 2022

The attacker only has to get it right once

Do they really though?

Sep 25, 2022 •

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts