Articles
No articles match. Clear filters
Newest articles
article
Follow the Acquisitions: Security's Real Fight Is Over the Data Layer
Two years of security deals put the money into telemetry pipelines, observability and security data lakes, not detection or AI models. If you're about to sign a SIEM, platform or MSSP contract, judge vendors on who controls your data and how you get it back, not on the AI demo.
01 Oct, 2026
Open document : Follow the Acquisitions: Security's Real Fight Is Over the Data Layerarticle
Your Decisions Are the Bottleneck, Not Your AI
AI can do security work in seconds, but the work still waits in queues and SLAs built for human speed. Compare each SLA with how fast AI can do the same step, automate the steps that need no judgment, and set clear rules for when containment blocks and when it goes to a person.
26 Sep, 2026
Open document : Your Decisions Are the Bottleneck, Not Your AInote
How Do Security Leaders Learn to Talk Business? An Open Question
Security leaders lose decisions when they report on controls instead of choices. A question-stage note: why I think the translation fails, what the SEC's 2023 rule implies about who carries it, and a way to start practising this week.
26 Sep, 2026
Open document : How Do Security Leaders Learn to Talk Business? An Open Questionexperiment
I Scanned 16 MCP Servers for Safety Hints. The Scanner Flagged Every One.
On 2026-05-21 I scanned 16 public MCP servers for tool annotations, the hints agent clients use to decide when a human approves an action. The scanner flagged all 16, and one of those results is wrong. Here is what the gap means for approval gates, and what to check before you adopt a server.
20 May, 2026
Open document : I Scanned 16 MCP Servers for Safety Hints. The Scanner Flagged Every One.article
What AI Is Actually Doing in Your SOC — and What It Shouldn't Be Doing Yet
Only 9% of security practitioners are "very confident" in AI-generated alerts — yet adoption is accelerating. The gap comes down to a distinction the demos never make: AI at decision points in a workflow is not the same as AI replacing the workflow. Here is which use cases earn their keep.
27 Apr, 2026
Open document : What AI Is Actually Doing in Your SOC — and What It Shouldn't Be Doing Yetarticle
Your Data Lake Is Only as Useful as Its Ability to Answer a Question
You moved security data to a lake and cut costs. Then an investigation hit and your team spent two weeks finding what should have taken hours. The difference between a cheap archive and a queryable security asset comes down to three architecture decisions most organizations haven't made yet.
09 Apr, 2026
Open document : Your Data Lake Is Only as Useful as Its Ability to Answer a Question