Frankly Speaking

Is it ok to miss a security incident?

Palo Alto Networks Acquiring CyberArk: Offense or Defense?

Security Is Splitting: Three Acquisitions, Three Different Realities

The new threat model for AI

Software engineering for security: Performance Tradeoffs

Why security has become easier

A letter to security vendors

Data security should be making a comeback

My thoughts on the Zscaler acquisition of Red Canary

Will AI lead to more "managed" security services?

High-Leverage Security Engineering Tasks

Why security is still hard (and getting harder)