Hello, For years, the cybersecurity community has comforted itself with the belief that Cryptographically Relevant Quantum Computers (CRQC) and the transition to Post-Quantum Cryptography (PQC) were distant, highly specialized concerns, matters for researchers and/or a … Read more
Hello, For years, the cybersecurity community has comforted itself with the belief that cryptographically relevant quantum computers (CRQC) were a distant threat, something on the far horizon, always decades away. That belief is simply no … Read more
Cybersecurity in the United States has always been more than a technical discipline. It is a civic discipline, a national responsibility, and a cultural commitment. When we speak of protecting networks, data, and systems, we … Read more
Hello, October brings with it National Cybersecurity Awareness Month, a yearly pause where the cybersecurity community recommits to basic principles and takes stock of the big picture. It’s a welcome ritual that reminds us that … Read more
Hello, There’s a certain thrill in watching Zero Trust Architecture march to center stage in the cybersecurity world. Like a freshly knighted squire, it brandishes its motto— “never trust, always verify” like a shield, and … Read more
Hello, It’s easy to get caught up in the chivalric vision of cybersecurity; it’s one that pervades the industry and has for…oh, well, ever. More than a decade ago I attended a lavish cyber conference … Read more
Hello, I’m writing this letter four days after the attempted assassination of an American presidential candidate. Perhaps I shouldn’t be surprised, but political violence in America still shocks me. That being said, what didn’t shock … Read more
Hello, I have a well-researched theory that (OK, well-researched by me, and since this is my column…you get the picture) that most cybersecurity wisdom stems from 1970’s punk rock. For example, in 1977, Joey Ramone … Read more
Hello, Over the last several decades the terms information security and cybersecurity have become conflated to the extent that they’re used interchangeably. Information security is cybersecurity is information security. For sources that do identify a … Read more
Hello, It’s easy to think of cybersecurity as a coldly logical space where the deterministic management of machines and software creates a binary reality. Do the right thing (for values of “right” that equate to … Read more
