As if secure design is the only bullet point in a list of software engineering best practices Systems Approach  As my Systems Approach co-author Bruce Davie and I think through what it means to apply the systems lens to security, I find that I keep asking myself what it is, exactly, that’s unique about security as a system requirement?… READ MORE HERE…

‘No one was kicked off the NTSB in the middle of investigating a crash’ interview  Gutting the Cyber Safety Review Board as it was probing how China’s Salt Typhoon breached American government and telecommunications networks was “foolish” and “bad for national security,” says retired US Navy Rear Admiral Mark Montgomery.… READ MORE HERE…

How to communicate risk to executives Partner Content  Have you ever watched ? It’s one of my all-time favorite movies, not just for the story but for how it handles complexity.… READ MORE HERE…

And it doesn’t take a crystal ball to predict the future If the nonstop flood of ransomware attacks doesn’t already make every day feel like Groundhog Day, then a look back at 2024 – and predictions for 2025 – definitely will.… READ MORE HERE…

And you, China, Russia, North Korea … Guardrails block malware generation Google says it’s spotted Chinese, Russian, Iranian, and North Korean government agents using its Gemini AI for nefarious purposes, with Tehran by far the most frequent naughty user out of the four.… READ MORE HERE…