Insights
Writing on cyber risk, AI governance, security operations and financial crime, from national CIRT work to today's regulated sector. Newest first.
10 articles
Japan's first cyberspace state of emergency leaked millions of ID images. What that means for photo-and-selfie KYC, the stronger methods replacing it, and the policy changes that matter more.
How AI changes each of the seven phases of the Cyber Kill Chain, from reconnaissance to actions on objectives, and what defenders must do now that security is becoming model versus model.
Meeting bots and casual screenshots can hand attackers enough voice and image data to clone you. The risks, and the consent and tooling controls that reduce them.
The indicators and log sources a SIEM should use to catch malware, phishing, web application attacks, insider threats and APTs, threat by threat.
What changed in NIST CSF 2.0, from the new Govern function and supply chain risk guidance to outcome-focused measurement and better alignment with ISO 27001 and COBIT.
Saving thousands of hours with AI is real, but so is the day it goes down. Why AI dependency needs fail-safes, contingency plans and people who know what to do without it.
How NIST's AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act fit together as a blueprint for trustworthy, accountable AI.
What the WEF, Gartner and McKinsey forecasts actually say about AI and jobs, and the two ways professionals can prepare for roles that do not exist yet.
Cyber Kothon, part one (in Bengali). Three everyday habits, locking the door, testing a socket and guarding a signed cheque, mapped to locking your screen, not clicking unknown links and protecting your card.
What ransomware is, how it gets in, and eleven practical habits that keep individuals and organisations out of the ransom conversation.
National policies, frameworks and articles for Bangladesh Post, BGD e-GOV CIRT and Computer Jagat.