Global Cybersecurity expert of 30 years. British Computer Society Fellow, Member of the Ivor's Academy. Gartner Veteran. That Fraud Guy. Writer for Dark Reading
Oporto, Portugal
- Tweets 6,097
- Following 1,515
- Followers 1,249
- Likes 1,883
Your firewall management plane has a CVSS 10.0 root vulnerability, and the attackers have been inside for six weeks.
Patch Tuesday gave you 974 CVEs this week. CISA just told you which three come first.
26
Something out of the ordinary. I set a agentic task running a while back to keep an eye on threats and alert appropriately.
Today, it produced this:
Breaking: Progress LoadMaster RCE Under Mass Exploit — CISA Deadline Today buff.ly/tcPWcXt
1
166
This is my ontology. 991 entities — threat actors, malware, CVEs, relationships — built over months of work.
That's context engineering. Not prompt engineering.
The CISO who bans AI doesn't stop AI use. They stop visible AI use. Shadow AI follows prohibition, not permission.
1
30
Security vendors have discovered AI. So have the attackers.
Every booth at RSA will say "AI-powered". Ask any of them what they're doing about prompt injection or context poisoning and watch the subject change.
Compliance theatre got a software update.
31
Ransomware payments: 28% of attacks in 2026. Record low. Not a win.
Operators shifted from encryption to exfiltration. No decryption key to negotiate. Marquis v. SonicWall heads to trial. Vendor liability for breach pathways is becoming case law.
#CISO #CyberSecurity
1
35
The CISO question isn't "which Guardian Agent do I buy?"
It's: does this agent have security properties intrinsic to how it's built, or does it need external supervision to behave?
Those are different problems.
9
I'm pleased and proud to announce that @kuppingercole's Leadership Compass for Generative AI Defense is now available to members! Simply login and buff.ly/lZyFT73 will give you one of the first analyst reports into this area, offering valuable advice to the CISO
1
28
In today's SICO Intelligence Sunday Read: "It's pop-u-lar..."
buff.ly/NILFxtV
22
In today's CISO Intelligence: Another digital tsunami, this new-fangled thing called progress, the lesson for today, keeping all bases covered, the party's over, and the same but different.
buff.ly/0bOpIXo
17
In today's CISO Intelligence: The choreography doesn't always tell the story, when trust becomes a question mark, a dubious crown, a new use for a resurrected tool, not the Bond villain but close, and the red alerts we will all like.
buff.ly/uz6ELvb
16
In today's CISO Intelligence: A very classy move.
buff.ly/m8bHS0S
10
The alarm bells should be ringing.
buff.ly/GK0bBPJ
7
On today's CISO Intelligence: The never-ending pruning story, who left the doors unlocked? When privacy goes out of the window, the day the tide turned, a major blunder, and subtlety: the unwanted gentle touch.
buff.ly/ofs3Tc8
12
In today's CISO Intelligence: The magic trick no-one wants, no time for slacking, do the homework! Making big waves, raising the defensive game, and oh - the irony!
buff.ly/ans8hnl
13
In today's CISO Intelligence: What you see is not always what you get, not the usual teamwork, rapid rethink required, rebooting is now on steroids, too many hands cause chaos, and secrets laid bare.
buff.ly/dCjgcuc
11
In todays weekend CISO Intelligence: The doppelgänger dilemma.
buff.ly/mXkSM13
8
In today's weekend CISO Intelligence: Nesting doll syndrome?
buff.ly/KTH1cYK
2
In today's CISO Intelligence: A most ingenious paradox, just one smooth move, money making the world go around, guarding the vault, when tall tales get called out, and who's zooming who?
buff.ly/pa7YD2D
2
In today's CISO Intelligence: Looks like the families just shook hands, a change of season doesn’t mean time to relax, when reality bites, untangling woven webs, it's scary when the protectors join the dark side, and the party's over.
buff.ly/odhrQ4i
7