When a Programming Language Becomes a National Security Problem
South Korea’s National Security Office didn’t call an emergency meeting because someone found a bug in a niche software tool. They called it because PHP—one of the most widely deployed…
My Artificial Intelligence Thoughts and Nothing Else
South Korea’s National Security Office didn’t call an emergency meeting because someone found a bug in a niche software tool. They called it because PHP—one of the most widely deployed…
Last year, something remarkable happened in the tech world. Artificial intelligence discovered security vulnerabilities in PHP—a programming language used by millions of websites worldwide—that humans had somehow missed for years.…
When I look at data, I’m always interested in what it reveals about real-world behavior versus what people say they’re doing. A recent survey from Willis caught my attention because…
Last week, I was sitting in a coffee shop when a stranger’s phone got stolen. Within minutes, I watched them frantically cancel credit cards, change passwords, and contact their bank.…
Last week, the States of Guernsey pulled several critical websites offline. Not because of a hack. Not because data was stolen. But because they spotted a vulnerability in their web…
Last month, I spent some time reading about the latest cybersecurity innovations coming out of major industry conferences, and I have to be honest—a lot of it felt like corporate…
There’s something interesting happening at security conferences these days. Companies that work in cyber defense are increasingly mingling with military and law enforcement officials—not as separate worlds, but as integrated…
Last month, millions of shoppers at Food Lion, Giant Food, and Stop & Shop stores discovered something unsettling: they couldn’t use their loyalty programs, pay with digital wallets, or access…
A company called OpenCode recently disclosed a security breach. It sounds like a routine notification—the kind that gets buried in your inbox alongside a dozen other vendor emails. But here’s…
I spent last Tuesday afternoon cleaning up after a ransomware attack. Not my own infrastructure—thank goodness for proper backups and segmentation—but a client’s network. Watching the team work through the…