November 2, 2026 A follow-up to “The Tangled Web: How Today’s Threats Feed Each Other.” In my last post, I argued that today’s threats are not separate problems but a web, and that we are thinning out the defenders at the moment the threats converge. Arguments like that can feel abstract. So this time I […]
Active Cyber Defense
The future of our digital world is in serious peril from the ubiquitous and constantly evolving cyber threat – a threat to which today’s static and reactive security mechanisms cannot easily cope. Cyber defenses must be transformed to proactively disrupt and dismantle the attacker’s kill chain to defeat today’s and tomorrow’s dynamic cyber threat. Our defenses must become anticipatory through predictive analytics to foresee and forestall our adversaries’ next moves. Our defenses must also be context-aware, so that they can adapt dynamically to counter and deflect new attacks, while also ensuring that mission goals can still be met. Ultimately, the protections for our digital world must evolve quickly to a new era of active cyber defense.

October 31, 2026 There is no shortage of writing about how today’s crises connect. Risk reports map it every year, and some historians call it a “polycrisis.” Cyberattacks, a fragile grid, migration, polarization, artificial intelligence, quantum computing, and debt each pull on the others. That much is well documented, and I will walk through it […]

October 22, 2026 The convergence of quantum computing and agentic artificial intelligence creates a security problem that cannot be solved by treating quantum readiness, AI security, and Zero Trust as separate initiatives. Quantum computing places pressure on public-key cryptography used to authenticate identities, establish keys, sign software, and protect long-lived information. Agentic AI expands the […]

September 17, 2026 Artificial intelligence is beginning to transform cybersecurity from a profession dominated by human-operated tools into one increasingly characterized by autonomous systems capable of monitoring, investigating, reasoning, and acting on behalf of security professionals. The emergence of increasingly capable AI agents represents a particularly important inflection point. Unlike conventional cybersecurity automation, which generally […]

August 28, 2026 I was reading through some of the recent DEF CON 34 presentation descriptions and was struck by how complex the deception and evasion techniques have become for malware Command and Control systems (C2). This made me research some more and I discovered that the physical stealth world has also been undergoing a […]

August 16, 2026 For centuries, military advantage has been measured in weapons, manpower, territory, and technological superiority. But the battlefield is changing. As autonomous drones, AI, networked weapons, satellites, robotic vehicles, and increasingly realistic autonomous agents become integrated into military operations, warfare is evolving into something far more complex: a cyber-physical battle for control of […]

July 24, 2026 Modern critical infrastructure depends upon an increasingly complex ecosystem of software, hardware, supply chains, operational processes, artificial intelligence, and human institutions. Yet assurance for these systems remains fragmented across traditionally independent disciplines—including software assurance, hardware assurance, cybersecurity, supply chain security, operational resilience, and information integrity—each employing distinct standards, certification processes, and trust […]

May 22, 2026 I was talking recently with my son who works in an AI lab designing and building assembly lines for automated AI factories and the discussion reminded me of how I was involved in an effort with NIST 20+ years ago to get some standards support started for the fledgling NIST RMF with […]

April 2, 2026 Belief systems have traditionally been treated as passive—formed through experience, culture, and social context. But in a world shaped by algorithmic feeds, synthetic media, and microtargeted narratives, passivity is a liability. Disinformation is no longer incidental; it is engineered. What if, instead, your belief system had an active counterpart—a dynamic, AI-powered digital […]





