AI SOC Got Commoditized - Now What?

The Regulation Pendulum and AI’s National Security Reckoning

The Trump administration’s approach to AI regulation has been one of the most dramatic policy reversals in recent memory.

The Firewall Evolved, and It Was About Time

A look at what a modern hybrid mesh firewalls looks like in practice

Resilient Cyber Newsletter #96

White House Reverses Course on AI Oversight, NIST AI Testing, CISA Agentic Adoption Guidance, Bug Bounty Slop, Vercel DeepSec & Securing the Agentic SDLC

Vulnerability Management in the Age of AI-Accelerated Everything

I co-authored Effective Vulnerability Management in 2024 because I believed the industry’s approach to vulnerability management was fundamentally misaligned with how software was actually being built, deployed, and attacked.

Why AI Security Feels So Fragile

Ron Bennatan of Varonis on black boxes, agentic access patterns, and why the detect-and-alert playbook is running out of runway

The AI Cyber Capability Curve

Two frontier labs, one collapsing defensive infrastructure, and a curve that keeps steepening

Resilient Cyber Newsletter #95

Mythos-Class Hacking for Everyone, Pentagon Vibe Codes 10,000 Agents, Google's State of Prompt Injection, The Unsolved Problem of Agentic IAM, Red Teaming CI/CD Pipelines & 21,000 Malicious Packages

The Identity Layer Underneath the Agentic Enterprise

A look at the evolving Agentic IAM landscape and Okta's approach to securing Agentic Identity