New analysis & refreshed archive
Explore new perspectives and updated editions of original articles, newest first. Restored articles retain their original titles, paths, and issue dates.
October guidance from U.S. agencies and a Singapore tabletop exercise put agent control and incident readiness in focus. Here is a bounded drill for testing who can stop an agent and establish what it changed.
A connected agent needs an accountable owner and a bounded identity. Start with what it can reach, then test what it is allowed to do.
Treat the software delivery pipeline as privileged infrastructure, with explicit trust boundaries from source changes to production.
Voice impersonation changes what a familiar call can prove. Build verification into urgent payments, access changes, and sensitive requests.
MFA protects sign-in, while application consent creates another access decision. Review both before trusting connected tools.
Defend the application around the model: the inputs it trusts, the data it reaches, and the actions it can take.
Give employees a useful approved route for AI work, with clear boundaries for data, integrations, and consequential decisions.
Improve patching speed by removing ownership and validation delays while keeping priority tied to actual exposure.
Seven practical decisions turn recovery targets into a service the business can actually resume.
A response plan is a decision system. Rehearse authority, communication, and recovery, not just the technical investigation.
Revisit seven ransomware assumptions with a practical recovery checklist, updated for current leadership discussions.
Turn a broad security score into a specific business scenario, an evidence-based estimate, and a decision someone owns.
Translate recovery ambitions into business priorities, decision authority, tested dependencies, and measurable evidence.
Keep exploring
Read the latest analysis, explore a topic in more depth, or find speakers with relevant public work.
May we use Microsoft Clarity cookies, heatmaps, and session recordings to understand how readers use this site? Analytics stays off unless you allow it. Advertising storage is disabled.
Privacy details. You can change your choice using Analytics preferences in the footer.