What Security Is For: A Better Way to Measure Success
Black Hat fills the Las Vegas desert with exploits, defenses, products, arguments, and ingenious machinery. Beneath all of it lies a simpler question: what kind of life are we trying to protect?
Community Corner
DDoS Smokescreens Miss the Real Story
DDoS attacks aren't just distractions. Learn why they reshape defender decisions and create opportunities beyond downtime.
Stop Treating Every Human Risk Problem Like a Training Problem
Most security failures aren't training failures. Learn why understanding decision ecosystems leads to better cyber risk outcomes.
Beyond Zero: How We Got Ants in Cybersecurity
Why adding more security controls can create complexity, blind spots, and unintended risk instead of better protection.
Is Your Booth The New Babe?
At cybersecurity conferences like Black Hat, the best booth isn't the loudest one— it's the one that clearly tells buyers why your company matters.
AI Agents Expose the Non-Human Identity Security Gap
AI agents are accelerating non-human identity sprawl. Learn why identity security gaps are now measurable and growing.
Paperback Writer in a Prompted World
The attacker no longer needs one carefully written phishing message. The attacker can generate thousands of stylistic and contextual variants.
Break It Before They Do: Chaos Engineering for DDoS Resilience
Learn how chaos engineering helps organizations test DDoS resilience, expose weaknesses, and improve recovery before attacks strike.
Above the Packet: Cybersecurity's New Meaning Layer
In less than two weeks, a question about software safety moved from coffee-call conversation to an OpenSSF issue, a community schema, a validator, and active alignment with CycloneDX and SPDX. That speed is interesting. The way it happened is more interesting.
Why The Cybersecurity Team Should Be The Marketers' Best Friend
Cybersecurity and marketing share the same goal: trust. Learn why closer collaboration strengthens brands and reduces risk.
Cybersecurity Lessons from the Semiquincentennial of Liberty
As the United States of America enters its second quarter millennia, the tradeoff of security and liberty is never more apropos than it is to the cybersecurity industry. (Includes infographic)
Size DOESN'T Matter When It Comes To DDoS Attacks
The biggest DDoS attacks grab headlines, but impact matters more than size. Learn what defenders should really measure.
Stewarding the Generative Set in the Age of AI
As AI spreads, communities need trusted stewards to provide context, judgment, and accountability where automation falls short.
When Agents Knock: PACT, AI Browsers, and the Next Web Perimeter
AI agents and AI browsers are changing security boundaries. Learn what PACT means for the next web perimeter.
More Noise, More Risk: Reframing Internal Comms Overload
If you work in SecOps more noise equals more risk. The more alerts you have, the harder it is to find the ones that need immediate action. Yet in my experience, this idea of more noise being detrimental to understanding, does not stretch beyond the SOC into business communications.
We Know Reality by What Returns
A utility trusts its operating picture because measurements return in expected ranges, alarms correlate with physical events, crews report back from the field, substations behave consistently, and the model of the grid keeps meeting the grid itself. Return is how reality becomes believable.