Cloud SecurityWhat the recent SharePoint bugs told us about the patch raceAaron BeardsleeJuly 23, 2026Patching still works – but it can’t handle the entire defense by itself.
Supply chainWhy supply chain attacks work and what detection can actually do about itAaron BeardsleeJune 2, 2026Here’s what to do in a world where credential theft has been automated and turned into a commodity.
AI benefits/risksWhy Anthropic was right to form Project GlasswingAaron BeardsleeApril 24, 2026Like any other high-level offensive security tool, it just makes sense to lock it behind serious scrutiny.
Zero trustThe Axios npm breach taught us the need for a personal zero-trustAaron BeardsleeApril 7, 2026Security pros need to develop a mental zero-trust that trusts nothing and tests everything.
