IdentityThe AiTM problem nobody’s architecture actually solvesAlan LeFortMay 20, 2026Accountability becomes the big issue following a breach – does the team know who’s responsible for what?
AI benefits/risks3 ways CISOs can better evaluate AI security vendorsAlan LeFortApril 8, 2026Here’s three tips to help guide CISOs through the maze of hype and overpromising around AI.
AI benefits/risksAnthropic’s 500 zero-days tell us something CISOs aren’t ready to hearAlan LeFortMarch 12, 2026Security pros need to understand that most AI attacks exploit organization trust, not software bugs.
Security OperationsWe’re still sacrificing virgins to appease the volcanoAlan LeFortJanuary 29, 2026Why our reactive-based security system based on somebody getting hit no longer works in the AI era.
Zero trustFive questions to ask about email whitelistsAlan LeFortJanuary 14, 2026Here’s how teams can prevent email whitelist from becoming a large hole in their zero-trust programs.
Email securityAI attacks expose email security threatsAlan LeFortAugust 19, 2025Here's a strategy for embracing AI-enabled email security.