Cybersecurity · Critical infrastructure · AIThree decades reading threats.
Three decades reading threats.
Now helping the people who have to decide what to do about them.
For thirty years my job was to turn what adversaries are doing into decisions leaders could act on. I spent my career where information is a weapon, a shield, and occasionally both at once. The last five years, focused on cybersecurity and critical infrastructure, taught me how defenders lose: slowly, politely, and by planning for last year's threat.
Latest
AgentBaiting: When the Agent Does the Discovery
For years, malware on GitHub waited for a person to find it. The newer version waits for an agent. On 20 July 2026, Island published an analysis of a long-running GitHub malware …
AI Has Crossed From Assistant to Operator
Jul 18, 2026 · 4 min
When an AI Assistant Stores a False Memory
Jul 14, 2026 · 6 min
Vulnerability Exploitation Is Moving Faster. What the 2026 Time-to-Exploit Data Shows
Jun 26, 2026 · 5 min
The AI Agents Already Inside Your Network May Not Show Up in Your Data Loss Prevention
Jun 21, 2026 · 4 min
New writing, when there is new writing.
RSS feed →
Projects