Detection engineering, incident response, threat-led testing, and the messy human reality of running security in real organisations. Based in the UK, working in UTC.
Practical, opinionated, UK-flavoured resources for taking back control of your exposure and resisting the steady normalisation of surveillance. Long-time supporter of the EFF; long-time user of OpenPGP.
WIRED's reporting on thousands of leaking vibe-coded apps is 2017's S3 bucket era in new packaging. A CISO and non-executive director's view of the boardroom questions, regulator exposure and ninety-day plan.
A CISO and NED view of the last fortnight in UK and EU privacy: age verification, Ofcom fines, the Digital Omnibus, the IPT hearing on Apple, and the ICO.
A reflection on a single week of cyber security disclosures — and what they tell us about the shape of the threat landscape, the maturity of attackers, and the choices defenders now need to make.