How to Tackle the Cybersecurity Careers Gap

Too many people are unsure how to enter or grow in the cybersecurity industry. It’s a relatively young field, and we haven’t done a good job of defining what it means to have a career in it. Hiring managers who are worried about finding candidates because of the much-discussed cybersecurity skills gap should consider the…

Read more

May 12, 2023
Read More >>

As a CISO, Are You a Builder, Fixer, or Scale Operator?

When contemplating the next step in your career as a cybersecurity leader, understand what you do best and what you enjoy doing. Figuring this out will help you identify organizations and projects that will benefit from your superpowers and accelerate your growth as a professional. As an added bonus, you’ll be more effective in communicating…

Read more

May 10, 2023
Read More >>

AI Revolutionizes Infosec

After two and a half decades in information security, I’ve witnessed countless failures in security efforts. Most of them can be traced back to either asking the wrong questions or lacking the necessary context for effective action. Enter AI, which promises to address these shortcomings with two fundamental advantages: Context and Question-based security products. Flaws in Vulnerability Management…

April 3, 2023
Read More >>

import alignment: A Library-based Approach to AI Alignment

There is much being said right now about the AI Alignment Problem. There’s more to it, but it’s essentially the question of how to keep AI from destroying us when it wakes up. Yay. Russell argues that we need uncertainty built into our alignment efforts. I just read Stuart Russell’s excellent book on the topic—which I highly recommend—and…

April 3, 2023
Read More >>

Shift Your Mindset from Conflict to Collaboration to Succeed in Security

In the two decades I’ve spent in cybersecurity, I’ve observed and experienced the fighting spirit of security professionals: When tasked with safeguarding information assets, we envision ourselves erecting defenses to keep threat actors at bay, or we emulate malicious actions to find flaws in the organization’s security measures before attackers exploit them. We fight. Let’s…

Read more

March 29, 2023
Read More >>

6 Phases of the Post-GPT World

Companies Become Models/APIs People Become Models/APIs AI Assistants Content Authentication Knowledge Work Replacement The Creativity Explosion Introduction We’ve all seen the non-stop stream of news from OpenAI. First we see GPT-4, where you have the announcement on Tuesday morning and you basically have thousands of companies launched by sundown. And then we see chatgpt plugins drop, which are…

March 27, 2023
Read More >>

Calling Out The Security Community on AI

I want to call out our community for a second on AI. And this applies to me as well because I have many of the same feelings. I feel there are too many in the security community who believe that AI is a minefield, and that it’s our job to warn people not to walk into it. I…

March 20, 2023
Read More >>