The Moment AI Stops Being a Tool: Why Autonomy Is the Risk Multiplier
A tool's failure is advisory because a human still reviews the output before anything happens. An agent's failure is operational because the bad output is the action...
ATT&CK
Latest
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
The Source of Foreknowledge: Inside the Security Monitoring and Analytics Labs of the Cybersecurity Architect's Handbook
Every query a device makes is a statement of intent — what it wanted to reach, when, and how often — and once you're logging them, you're no longer just blocking bad names. You're watching behavior....
Amazon
·
Strategy Without Tactics
"Instead of just rehashing abstract theory, it bridges the gap between high-level security principles and real-world execution. It's practical, actionable, and a great tool for anyone designing or engineering modern infrastructure."
Many Calculations Before the Battle: Inside the Threat Modeling Labs of the Cybersecurity Architect's Handbook
In the last post I gave you the tour — the foundational labs, the eight operational categories...So let's start where the whole discipline starts: Category 1, Threat Modeling and Risk Assessment.
AI
·
Found in the Wild!
I'm thrilled to share that the second edition of the Cybersecurity Architect's Handbook is officially out in the world.
books
·
You made It Possible - Coming Soon: Cybersecurity Architect's Handbook, Second Edition — Bigger, Bolder, and Battle-Tested
When the first edition of Cybersecurity Architect's Handbook: An End-to-End Guide to Implementing and Maintaining Robust Security Architecture hit shelves, the goal was ambitious but clear...
Ship Detections That Actually Work: A Hands-On Workshop for SOC Teams
If you've ever sat through a cybersecurity talk and thought, "Great framework, but how do I actually use this tomorrow?" — you're not alone. That frustration is exactly why Packt Publishing is sponsoring Powering Your SOC Team with AI Workshop: Real Incidents, Real Lessons exists.