Opinion
From NSA Recruit at 17 to CEO: The Making of a White-Hat Hacker
Vinnie Liu never broke into systems for thrills. He did it to understand them. That distinction, formed before he was a teenager, shaped a career that went from the NSA to running one of the most recognised offensive security firms in the business.
Your Scariest Vulnerabilities Might Not Be the Ones That Get You Hacked
Scanner reports full of 'critical' flags are drowning security teams. The real question is which of those flags actually give an attacker a path in.
What Actually Gets You From Security Pro to Security Leader
Technical skill gets you into the room. Knowing how to talk about risk in plain business terms gets you to the top. CISOs and security advisors explain what separates a great technologist from a great executive.
Patch automation needs a brake pedal, not just an accelerator
Faster patching cuts risk, but the same pipes that push good updates also push broken ones. Update rings and human checkpoints are how teams keep the speed without breaking production.
Why Testing One Attack at a Time Leaves Real Gaps
Security teams validate tools against single techniques and call it coverage. Attackers chain steps together, and that's where defences quietly fall down.
100 Tech Giants Warned That AI Is Making Cyberattacks Easier. They Forgot to Mention Who Will Stop Them.
More than 100 companies signed an open letter about AI-powered hacking. A veteran security educator read it closely and found the plan had no people in it.
The CISO Role Is Broken. A New Title Won't Fix It.
Security leaders are being asked to run the whole company while also running its defences. One analyst says the org chart itself is the problem, not the people in it.
The Hidden Blindspot in Industrial Cyberattacks, and How Fake Devices Help Fill It
When hackers cross from a company's office network into the systems that run physical equipment, the trail goes cold. A maturing technique called cyber deception is starting to change that.
Five engineering habits that actually earn customer trust (and one that is quietly expanding the problem)
A privacy expert argues that compliance checkboxes are the easy part. The hard part is making sure a customer's choice is respected by every system that touches their data, even the ones nobody thinks about.
From Navy Sailor to Cybersecurity Chief: What Chris Wheeler Learned About Trust
Resilience CISO Chris Wheeler spent years in the Navy before moving into corporate security. His core lesson: the job is about earning trust, not just blocking attacks.
The Cybersecurity Bill Is Getting Too Big to Pay
A record $4.99 million average cost per breach, bloated tool stacks, and AI spending that outpaces its own savings are squeezing smaller businesses toward a breaking point.
Vulnerability management is drowning, and AI is being sold as the lifeboat
Security teams face more software flaws than they can patch, and vendors are pitching frontier AI as the fix. Lucy Green looks at what that actually means for the people running these programmes.
Hired to Build, Judged on the Breach That Never Happened
The skills that land someone a CISO job are rarely the ones the board scores them on a year later. That gap is quietly ending careers.
A Local Housing Authority Lost $1 Million to Email Fraud. Here Is What It Did Next.
A cybersecurity consultant's account of how a small government agency rebuilt its defences after criminals silently rerouted a wire transfer offers a practical road map for the thousands of local bodies running on skeleton IT crews.
CodeSecCon Brings Developers and Security Teams Together to Fix a Growing Blind Spot
A virtual conference focused on building safer software is drawing both coders and cybersecurity professionals to the same table, a pairing that rarely happens and badly needs to.