Latest from the Blog
Thinking out loud about security, risk, and what it means to protect systems.
Why Small Businesses Don’t Need to Outrun the Bear
The good news: small practices don’t need to outrun the bear. They just need to be harder to penetrate than the practice down the street. Attackers are opportunistic. Most ransomware groups run automated scanning that flags easy targets — unpatched VPNs, legacy protocols left exposed, admin accounts without MFA. Solid MFA, current patches, and offline […]
AI Security Governance: Building a Framework Before You Need One
Most organizations are deploying AI faster than they’re building security controls for it. The result is a growing gap between what AI can do in your environment and what your security team can actually see or defend. AI security governance is about closing that gap — establishing a structured set of policies, controls, and oversight […]
What is MITRE ATLAS and Why Your Security Team Should Care
If you’ve heard of MITRE ATT&CK, you already know the basic idea: a curated knowledge base of adversary tactics and techniques, built from real-world observations. ATLAS is the same concept, purpose-built for AI systems. ATLAS stands for Adversarial Threat Landscape for Artificial-Intelligence Systems. It documents the techniques threat actors use to attack AI models, exploit […]