Cyber Threat Intelligence - Art, Science, something else entirely? Is Cyber Threat Intelligence an art, science, both, or something else entirely?
No Pain, No Gain - How Impunity Perpetuates Failure It’s time to treat cybersecurity incidents and data breaches like preventable disasters, not the inevitable cost of doing business.
A year in books - 2025 A list of all of the books I read in 2025, with a few notes attached to each of them.
Demand Without Development The cybersecurity talent shortage is not just a problem of numbers, but of structure. By systematically avoiding the hiring and training of true junior staff, the industry is reinforcing a feedback loop that shrinks its own future workforce.
A short(-ish) guide on information security writing Whether you’re compiling incident notes at 3 AM, drafting a post-mortem report for the board or helping the marketing department to craft a blog post that will generate near endless riches for your employer - we may like it or not, the ability to produce qualitative ..
A curated list of dead trees. A post in which I explain why I decided to create a curated list of publications on Russia and how I went about doing it.
A year in books - 2024 It's a bit early, but because I know how lazy I tend to get during the last days of a year, I decided to summarize my reading adventures of 2024 a bit earlier than would technically be warranted.
Sunsetting PGP TL;DR: I’ve been supporting PGP since around 2012. The number of encrypted or signed messages I receive haven’t been high to begin with, and have only decreased since. It’s time to let it die.
The hater's guide to hating the hater's guide to Kubernetes I found a “hater’s guide to Kubernetes” on the Internet, and disliked it so intensely for not being hater-y enough that I felt compelled to write about my feelings.
A year in books - 2023 2023 wasn't the best year when it came to my reading habits. I only started taking notes in ..