Portfolio
Talks, writing and commentary.
A working index of where my research and opinions have shown up: conference talks, press commentary, bylined articles and podcasts. Updated as things publish.
Talks & videos
Keynotes, conference sessions, panels and broadcast interviews, collected in one YouTube playlist.
Open the full playlist on YouTube
- SANS Technology Institute 2025 Commencement Speech
- Vulnerability management keynote, CIO Edge Sydney
- Why cyber operations are the next big target for autonomy
- From Overwhelmed to Control: moving to proactive vulnerability reduction
- Cyber & AI Innovators Summit interview
- RSA Conference 2024 interview
- Zero Trust Beyond the Buzzwords
- JavaScript Obfuscation: Can You Deobfuscate Who's Naughty or Nice?
- Ransomware & Zero Days: a 5-step action plan
Media commentary
Selected press where I was quoted or interviewed. For a comment or briefing, email me.
- Will AI Kill the Bug Bounty Industry?
- Shai-Hulud Hackers TeamPCP: Lucky or Skilled?
- OpenAI Daybreak: secure by design
- Melissa Bischoping took the scenic route to a career in tech
- Why GPT-5.4-Cyber marks a move toward the security of tomorrow
- Behind the Mythos hype, Glasswing has just one confirmed CVE
- Anthropic's newest AI model could wreak havoc. Most in power aren't ready
- Anthropic unveils Claude Mythos
- Anthropic rushes to limit leak of Claude Code source code
- Critical vulnerability in Claude Code emerges days after source leak
- Nvidia wants to make it easier to create an OpenClaw AI agent
- Nvidia details NemoClaw security guardrails
- Cyber Insights 2026: Threat hunting in an age of automation and AI
- Shai-Hulud worm returns stronger in latest supply-chain campaign
- Open source community thwarts massive npm supply chain attack
- The npm incident frightened everyone, but ended up being a good news story
- New Gmail warning: do not open this email from Google
- 2025 forecast: AI to supercharge attacks
- Sprawling CrowdStrike incident mitigation showcases resilience gaps
- Black Hat preview: CrowdStrike, disinformation lead the narrative
Writing
Bylined articles and contributed pieces.
- Curiosity is more important than demographics as companies look to narrow the AI divide
- Building trust into automated cybersecurity decisions
- The right role for agentic AI in security operations
- Running on Empty
- La pyramide des besoins en informatique
- Overwhelmed by agents: the next frontier of cybersecurity fatigue
- Resilience over reliance: preparing for IT failures in an unpredictable digital world
- How to gamify cybersecurity preparedness
- Cyber threats at the Olympics
- What's the key to bringing more diversity into the tech sector?
Podcasts & interviews
- Cyber operations are the next big target for autonomy
- Agentic AI could help strengthen federal network resilience
- From Intel to Action: The Human Side of Threat Intelligence
- Autonomous is the new watchword in endpoint security
- The Future of Endpoint Security: AI, EDR and SOC Evolution
- Innovator Spotlight, Black Hat 2024
- You DO Security, You Do Not HAVE Security
- Let's Converge
- CyberWire Daily #1587
Elsewhere
Need a speaker or a comment?
Keynotes, panels, podcasts and press commentary on threat intelligence, security research, AI in security operations and security leadership.