Posts
Scattered Spider's Playbook Is Simple. Your Defense Needs to Be Simpler.On June 22, 2026, Thalha Jubair, 20, and Owen Flowers, 18 — both from the UK — walked into Woolwich Crown Court and …
Posts
Explore my latest blog posts.
If you enjoy the content, then consider buying me a coffee.
Posts
Scattered Spider's Playbook Is Simple. Your Defense Needs to Be Simpler.On June 22, 2026, Thalha Jubair, 20, and Owen Flowers, 18 — both from the UK — walked into Woolwich Crown Court and …
Posts
OS Weekly: A Ransomware Access Broker, Stolen OAuth Tokens & the Human Factor in SecurityThis week’s stories share a theme: the fundamentals — access hygiene, token rotation, and security awareness — are …
Posts
AWS Security Agent: Continuous Penetration Testing and Threat Modeling for the AI Development EraMost security programs are still built around a calendar, not a codebase. A pen test gets scheduled once or twice a …
Posts
OS Weekly: Patch Deadlines, a Note-Free Ransomware, and AI Reshaping Security TeamsThis week brought two maximum-severity vulnerabilities with hard patch deadlines, a ransomware operator that changed the …
Posts
The Frontier, Split in Two: What Claude Fable 5 and Mythos 5 Mean for CybersecurityOn June 9, 2026, Anthropic did something it had never done before: it shipped a Mythos-class model to the public. Claude …
Posts
Security KPIs That Actually Matter: What to Report to the BoardMost CISOs walk into board meetings and report something like this: “We patched 1,247 vulnerabilities this …
Posts
Threat Modeling in Plain English: A Guide for Engineering TeamsMost engineering teams know they should be doing threat modeling. Very few actually do it — and the ones who try often …
Posts
SPECTRA: AI-Powered Vulnerability Triage That Actually Works for Security TeamsSecurity teams are not losing the fight because of bad tools. They’re losing it because of volume. In 2025, 131 …
Posts
Top 5 Claude AI Use Cases for Startup Cybersecurity Teams in 2026The cybersecurity landscape shifted dramatically in 2026. With the launch of Claude Code Security in February and the …
Posts
From Security Engineer to Security Leader: What Changes?Most people think the jump from Security Engineer to Security Leader is just a promotion. It’s not. It’s a complete …