Most management failures come back to one thing: the manager does not know what resources they actually have, and they have no technique for finding out. So they guess. They pick a deadline because of pressure from above, or because it sounds reasonable in a meeting room, or because they simply do not know what […]
There is a question that has been on my mind for a long time. Why is most management today so ineffective? Why do the things they say sound more like a wish list than a plan? I am not talking about every manager in every industry. I have seen exceptions. But the pattern I have […]
The Industry Loves Complexity Cyber security has a strange habit. Every year, more layers. More dashboards. More integrations. More moving parts…and somehow, more insecurity. Decades of experience showed me something simple: Complex solutions either fail, or create new attack surface while pretending to reduce it. That is the irony of modern security. We secure complexity […]
The myth of the self‑running system Every year, the industry repeats the same fantasy: buy the right tool, and the work will magically disappear. But tools do not create plans. Tools do not define objectives. Tools do not understand your environment, your risks, or your deadlines. A tool can automate a task. It cannot replace […]
a new label doesn’t create a new capability.” know what you actually need most people start with vendors before they start with themselves. that is the first mistake. if you don’t know what problem you are solving, every vendor suddenly looks “perfect”. it’s like walking into a hardware store without knowing if you need a […]
well, I actually changed the second part sarcastically, this is the original version: I am not the technical person but I really must sell you something today, can I connect you to another person in my company, an engineer perhaps? you know, we have a very great product but I am just lacking understanding what […]
most security solutions are like traditional painkillers, we certainly feel better after talking them, but the root cause of pain remains intact and unresolved! as long as we do not address root cause of security incidents and vulnerabilities, we will be feeling better from short-term pain relief of “Security Solutions” and then suffering again soon […]
I was shocked when I heard from a “security professional” that using dark web as means understanding cyber threats has been Just Recently been discovered by them as an effective defense mechanism! no kidding! then why we are surprised we get hacked by the most trivial TTP out there? this is very disappointing that “security […]
any solution 100% focused on endpoint protection would not actually protect you from cyber threats. best case scenario, you will discover IoC (not even necessary IoA) after the fact, after a system has actually been compromised. the easiest way to confirm this is what is happening everyday in companies with sophisticated but pure endpoint detection […]
different cultures have different perception and reaction to cybersecurity matters because cyberspace is as diverse as real life and it consists of and affected by all cultures involved. cultures are not significantly different in terms of understanding and identification of behaviors of their members. for example being lazy may have slightly same definition in multiple […]
one of the main reasons Security community has hard time securing “stuff”, is lack of understanding of Hackers community. without knowing motives, the motivations behind breaking into computer systems, and deep knowledge of hacking and cracking techniques, securing a system is pointless. results are telling us every single day that we are not doing the […]
the market has been acting as a reseller since late 90’s. we simply resell an old solution under a different shiny name again and again. one of the best examples is zero trust. with all noises around this concept, poor desperate companies waiting to resolve their security issues, or perhaps thirsty budgets waiting to find […]