Posts
All the articles I've posted.
The People Who Know Everyone - At Least, They Say They Do
Published:In corporate life, being well-connected can sometimes become a performance of its own. This short piece explores the difference between being visible and being productive and why knowing everyone matters far less than becoming someone the organization actually needs.
When Good Enough Is The Better Engineering
Published:Good engineering isn’t always about building the most perfect, polished, or automated solution. In real-world environments, engineering capacity is limited, problems compete for attention, and the last 20% can consume disproportionate effort. I’d rather build several useful solutions, automate the parts that matter most, and leave room for manual steps or future refinement where the return isn’t worth the investment yet. The goal isn’t to settle for poor engineering, it’s to spend limited engineering capacity where it creates the greatest impact.
Impactful is the new Actionable
Published:Cyber Threat Intelligence is undergoing a fundamental shift. As AI and modern security platforms automate much of the operational work traditionally performed by CTI teams, producing more indicators, detections, and reports is no longer enough. The real value of intelligence now lies in helping organizations understand risk, prioritize investments, and provide the technical context behind strategic business decisions.
The Dashboard always wins
Published:Why does a sophisticated forensics and detection platform struggle to gain visibility, while a vibe-coded country risk dashboard instantly attracts executive sponsorship?
The Return of the Open Source Debate
Published:The open source versus closed source debate is back, but this time AI is changing the rules. As LLMs make software easier to understand, the security advantage of obscurity continues to shrink. In the age of AI-assisted analysis, the most secure projects won't be the ones that hide their code, but the ones that can withstand scrutiny.
The trust tiers nobody talks about in CTI
Published:Trust in cyber threat intelligence is not binary. Here is how I think about the different levels of trust and what you can actually ask at each one.