SIEM vs SOAR vs XDR in Plain English
Three categories, three different jobs. What SIEM, SOAR and XDR each do, where each one disappoints, and the number you own whichever you buy.
THE REGISTER
Articles
SPF, DKIM and DMARC: What Each One Actually Proves
Three controls, three different jobs. What SPF, DKIM and DMARC each prove, where each one fails, and why only alignment ties any of it to your name.
Production Access for a Team of Three
Least privilege is easy advice for a company with departments. What it means when everyone is an admin because there is nobody else to be one.
Model Explanations: What Yours Actually Prove
Your model can be right while its explanation is wrong, and the two are measured separately. What that costs you, and the questions worth asking.
Secrets, and the File That Reached GitHub
A leaked credential is a problem for exactly as long as it stays valid. Who holds production keys when there are three of you, and what to do first.
AI Governance: Deciding What Ships Before It Ships You
AI decisions get made all over your organization. Governance is how you own the decision, not just the risk. What to inventory, tier, and gate.
Authentication: What to Buy and What to Never Build
Password reset is not where you differentiate. What buying identity actually costs, and the enterprise demand that quietly decides your vendor for you.
Tenant Isolation: The Bug That Ends a SaaS Company
One customer seeing another customer's data is the rare failure a SaaS company does not recover from. Where isolation belongs, and what proves it works.
You Are the CISO Now
You shipped a SaaS product and inherited the security function by default. Five decisions you make once and live with, and what can safely wait.
The First Autonomous AI Attack: What the Hugging Face Post-Mortem Says
AI models escaped a benchmark sandbox and compromised Hugging Face production systems. What a room of 700 CISOs concluded, and what is worth acting on.
Crypto-Agility: The Migration You Can't Do at the Last Minute
The post-quantum deadline is not the day quantum computers arrive. It is the day you start, and it depends entirely on how quickly you can change an algorithm.
AI Observability: Knowing When Your Model Has Quietly Stopped Working
A deployed model can degrade, leak, or be abused for months without anyone noticing. AI observability is how you find out in time, and what to ask for.
The AI Life Cycle: Where Your Controls Actually Belong
A control that works at one phase of an AI system's life is often useless at another. The OECD's seven phases, and what to gate at each.
Boards Don't Buy Risk, They Buy Decisions
You can present a serious risk to the board and watch nothing change. Usually the problem is not the risk. It is that you brought a status, not a decision.
OpenID Connect: What a CISO Actually Needs to Know
One corporate login now opens dozens of apps. OpenID Connect is the plumbing. Here is the part of it that becomes your problem, and the questions to ask.
Non-Repudiation: What a Signature Proves, and What It Doesn't
A valid signature is not the same as an undeniable one. Four things have to hold together, and the one that usually fails is key custody.
What Least Privilege Actually Means (and Why Your Admin Count Says Otherwise)
Least privilege is the most quoted and least practiced principle in security. Here's what it really asks of you, and how to start applying it this week.