In a World with Threats Around Every Corner - Practical Cybersecurity Architecture and AI Security
security made simple
Featured
Humble Tech Book Bundle: AI Cybersecurity Career Blueprint - Includes the CAH2!
I’m glad to see my book, Cybersecurity Architect’s Handbook, Second Edition, included in Packt’s Humble Tech Book Bundle: AI Cybersecurity Career Blueprint.
Security Architecture in an AI and Quantum World: My Conversation with 2GuysTek
A conversation with Rich from 2GuysTek about the Cybersecurity Architect's Handbook, the fundamentals that still matter, and how architects should approach AI, zero trust, quantum readiness, and legacy systems.
Seeing Cybersecurity Architect’s Handbook in the Wild Never Gets Old
Seeing a well-read copy of Cybersecurity Architect’s Handbook, Second Edition out in the wild never gets old.
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
Latest
The guest Wi-Fi name does not prove guest isolation
A guest SSID is a label. Isolation depends on the forwarding, routing, name resolution, and management paths that remain after a client joins it.
Basic Series: Security and privacy at home and around town
Your email, phone, and even your home router can be useful to a criminal. Learn what can go wrong, why it matters to you, and the small habits that make common attacks harder.
From Alert to Case: Preserving the Evidence Chain
Turning an alert into a case should preserve the original record, provenance, timestamps, hashes, custody events, and exportable evidence without claiming more forensic assurance than the pipeline can prove.
Humble Tech Book Bundle: AI Cybersecurity Career Blueprint - Includes the CAH2!
I’m glad to see my book, Cybersecurity Architect’s Handbook, Second Edition, included in Packt’s Humble Tech Book Bundle: AI Cybersecurity Career Blueprint.
SOC
·
Alert Severity and Response Authority Are Different Decisions
A critical alert does not automatically justify a critical action. Severity, confidence, asset context, and response authority need separate policy, evidence, and approval paths.
Operator Attribution Across APIs, Proxies, and Automation
Reliable operator attribution preserves the human initiator, delegated identities, automation executors, target subjects, trusted network context, and outcome across every hop.
cerebro
·
Cerebro: A Read-Only Security Intelligence Layer Built Around Evidence
Why I built Cerebro, how its read-only architecture limits authority, and what its current platform, investigation, threat, risk, GEOINT, and operational integrations can do.