October 22, 2026 The convergence of quantum computing and agentic artificial intelligence creates a security problem that cannot be solved by treating quantum readiness, AI security, and Zero Trust as separate initiatives. Quantum computing places pressure on public-key cryptography used to authenticate identities, establish keys, sign software, and protect long-lived information. Agentic AI expands the […]

Research & Standards
ActiveCyber covers the latest research efforts and open standards affecting active cyber defenses. Learn about the latest developments emerging from government and industry labs – from moving target defenses to biologically-inspired immunity defenses. Find out how the leading thinkers are addressing the challenges of securing the Internet of Things. Keep up-to-date on new standards and open source tools for adaptive security and the cloud, security automation, and intelligence-based defenses. This Spotlight will raise your awareness of the emerging trends that can improve your defenses against the dynamic cyber threat.

February 12, 2026 Each January for the last 10 years I have happily accepted an invite to attend the Annual Cybersecurity Forum that is co-sponsored by the University of Maryland’s Smith School of Business and the School of Public Policy. This annual gathering of academics, and industry and policy leaders is organized by professors Lawrence […]

May 9, 2025 Early in 2024 I met Ms. Vergara-Cobos at a conference where we shared some information about our recent respective work activities. She disclosed to me about her work leading a research study at the World Bank that focused on how cybersecurity impacts the growth of developing countries. This struck me as a […]

August 21, 2024 CISA has been working hard over the last 6 years to turn the tide on the never-ending stream of zero days and vulnerable systems that continue to plague our everyday lives. In 2018, it formed the ICT SCRM Task Force—a public-private partnership charged with identifying challenges and developing actionable solutions to enhance […]

Press Release – March 7, 2024 SRI chosen to deliver cyber-psychology-informed network defense technology for IARPA The innovative program will be centered around the psychology of cyber attackers. [March 7, 2024]: Menlo Park, CA – SRI announced today that it has been selected by Intelligence Advanced Research Projects Activity (IARPA) to deliver advanced technology for its recently announced Reimagining […]

April 18, 2024 It is evident over the last few years that central national governments are applying tighter controls on the security of software and hardware products – from labels for IoT devices in the US and abroad, to controls over AI research and bans on high risk AI models, to more timely reporting requirements on vulnerabilities, ransomware, […]

April 18, 2024 This is the second part of a two part series. You can find the first part of this feature at this link. It is evident over the last few years that central national governments are applying tighter controls on the security of software and hardware products – from labels for IoT devices in […]

For several years I have been honored to be a guest at the annual Forum on Financial Information Systems and Cybersecurity: A Public Policy Perspective organized at the University of Maryland by Larry Gordon, EY Alumni Professor of Managerial Accounting and Information Assurance; Martin Loeb, professor of accounting and information assurance and a Deloitte & […]

In my last article on the EO 14028 I mentioned that I thought there were several parallels between what the EO was calling out and some of the concepts and technologies that I discussed in my interviews and articles over the last 6 years. I constructed this crosswalk to reflect these relationships. I also added […]





