From Point Solutions to Platforms: What the Latest Security M&A Wave Tells Us
For years, the cybersecurity playbook was simple: spot a gap, launch a venture-backed startup, and build a hyper-specialized point solution.
Thoughts
How-To
Using ZoomEye to Audit Danfoss System Managers
Given the well-publicised recent hack of Danfoss refrigeration in France, I wondered whether there were any of the exposed devices
The Breach Files
Case #004: The Departure Lounge Leak
Target: Manchester Airports Group (Manchester, London Stansted, East Midlands) Date: August 2026 Threat Actor: FulcrumSec Attack Vector: Exposed API Credentials
Thoughts
The AI Token Hangover: Why Reactive Dashboards Won’t Fix Your Runaway LLM Spend
When foundation model invoices land, most teams face a massive bill with zero attribution. Shared API keys create financial blindspots,
The Breach Files
Case #003: The Key to the Kingdom
Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human
The Breach Files
Case #002: Trojan Supply Chain Attack
Target: SolarWinds (and ~18,000 downstream customers) Date: December 2020 Threat Actor: APT29 / Cosy Bear / Nobelium (Russian SVR) Attack
The Breach Files
Case #001: The $100 Million Phone Call
Target: MGM Resorts International Date: September 2023 Threat Actor: Scattered Spider / ALPHV Attack Vector: Voice Phishing (Vishing) & MFA
Thoughts
The SIEM Dilemma: Why Modern SOCs Are Drowning in Data and Starved for Context
For over two decades, the SIEM (Security Information and Event Management) system has served as the heart of the SOC
Thoughts
Shadow AI: The New Perimeter No One is Guarding
If there’s one thing my years in operational IT taught me, it’s that when security gets in the way of
Thoughts
The ECH Dilemma: Balancing Web Privacy Against Enterprise Perimeter Visibility
We’ve spent years trusting the browser padlock to keep our web traffic safe, but enterprise firewalls relied on a quiet