Posts
All the articles I've posted.
Impactful is the new Actionable
Published:Cyber Threat Intelligence is undergoing a fundamental shift. As AI and modern security platforms automate much of the operational work traditionally performed by CTI teams, producing more indicators, detections, and reports is no longer enough. The real value of intelligence now lies in helping organizations understand risk, prioritize investments, and provide the technical context behind strategic business decisions.
The Dashboard always wins
Published:Why does a sophisticated forensics and detection platform struggle to gain visibility, while a vibe-coded country risk dashboard instantly attracts executive sponsorship?
The Return of the Open Source Debate
Published:The open source versus closed source debate is back, but this time AI is changing the rules. As LLMs make software easier to understand, the security advantage of obscurity continues to shrink. In the age of AI-assisted analysis, the most secure projects won't be the ones that hide their code, but the ones that can withstand scrutiny.
The trust tiers nobody talks about in CTI
Published:Trust in cyber threat intelligence is not binary. Here is how I think about the different levels of trust and what you can actually ask at each one.
Most corporate CTI teams won't survive the next five years
Published:AI is going to replace the bulk of what corporate CTI teams do today. The question is whether the industry adapts or pretends this is not happening.
Lost in the Vendor Hall: Tales from a Cybersecurity Conference
Published:Step into the world of cybersecurity conferences, where serious talks collide with eccentric hackers, endless badges, and hallway wisdom. It's a chaotic, funny, and surprisingly insightful ride through keynotes, CTFs, and the people who make the community unforgettable.