Cybersecurity
Threats, defenders, and the security industry's response.
Cybersecurity
A convincing email, familiar voice or realistic video is no longer enough to establish trust. For US consumers, the strongest protection is a way to verify requests that the caller or message cannot control.
· 27 October 2026 · 13 min
Cybersecurity
Banks were among the first industries to deploy AI at scale, and among the first to feel what that does to a threat model. Attackers now generate convincing identities, the defences themselves have become attack surface, and regulators have started writing the rules down.
AJ Dellinger · 16 October 2026 · 13 min
Cybersecurity
The cryptography is settled, the deadlines are written into law, and most organisations have not finished the first step. A working guide to the post-quantum transition, from Shor's algorithm to the 2030 procurement cutoffs.
AJ Dellinger · 13 October 2026 · 12 min
Cybersecurity
Zero-trust programmes begin with strong mandates and identity-driven architecture. The work stalls where most networks actually live: the VPN, the legacy application, and the flat internal segment no one wants to renumber.
AJ Dellinger · 25 September 2026 · 10 min
Cybersecurity
Incident responders describe a decision process that has almost nothing to do with the ransom note and almost everything to do with backup restore times.
AJ Dellinger · 14 September 2026 · 8 min
Cybersecurity
Package ecosystems have added signing, provenance and scanning. The structural exposure is unchanged, because the exposure is a maintainer with a day job.
Andy Oram · 13 September 2026 · 8 min
Cybersecurity
Service accounts, tokens and now autonomous agents have quietly become the largest population on the corporate network. Very few organisations can name an owner for each.
Michelle Greenlee · 12 September 2026 · 7 min
Cybersecurity
Replacing passwords with cryptographic credentials works cleanly in consumer apps. Enterprise deployments surface messy problems with device binding, account recovery, and shared hardware.
Michelle Greenlee · 10 September 2026 · 7 min
Cybersecurity · healthcare cybersecurity
Thousands of clinical machines run obsolete software on modern hospital networks. Regulatory hurdles and operational risks ensure most will never receive an update.
AJ Dellinger · 9 September 2026 · 7 min
Cybersecurity
Recent breaches exposed the limits of automated cloud monitoring. Incident responders found that credential hygiene and plain architecture mattered far more than complex detection tools.
Michelle Greenlee · 8 September 2026 · 6 min
Cybersecurity
Damage to subsea cables and pipelines has forced Nordic and Baltic operators to plan for a threat model that mixes physical interference with network intrusion.
AJ Dellinger · 7 September 2026 · 8 min
Cybersecurity
Automated toolkits and cheap infrastructure have turned social engineering into an assembly line. Defensive tools still rely on rules built for an earlier era.
AJ Dellinger · 7 September 2026 · 7 min
Cybersecurity
Small and mid-size local authorities run essential services on thin IT teams and inherited systems. Attackers noticed before national policy did.
Michelle Greenlee · 20 August 2026 · 7 min
Cybersecurity
Software agents acting with staff credentials create an audit problem that existing identity systems were never designed to answer.
Michelle Greenlee · 4 August 2026 · 7 min
Cybersecurity
The clinical impact of ransomware attacks on hospitals is now measurable in mortality data. The coverage has not caught up.
AJ Dellinger · 22 June 2026 · 8 min
Cybersecurity
Security teams spent a decade rebuilding around the identity perimeter. AI agents acting on behalf of humans are the first serious test of whether that perimeter holds.
Michelle Greenlee · 14 June 2026 · 6 min