For years, many organisations benefited from an unofficial security control: sensitive information was technically accessible, but nobody quite knew where it was. Enterprise AI is rapidly removing that layer of protection. As AI assistants, copilots and autonomous agents gain access to corporate data, collaboration platforms and business systems, they are becoming some of the most knowledgeable participants in the organisation. While AI delivers significant productivity and innovation benefits, it also amplifies existing data security and insider threat risks by making information easier to discover, connect and surface. The challenge for security leaders isn't whether to adopt AI, but how to govern it. As enterprise AI becomes embedded in everyday workflows, organisations must rethink traditional insider threat models and treat AI as a privileged participant in the business. After all, AI doesn't need to break into systems. It simply makes use of the access we've already given it
The Robots Are Definitely Coming
A year ago, I asked whether the robots were coming. In 2026, the more uncomfortable answer is that we’ve already deployed them. AI is no longer just a tool for attackers—it is becoming part of our own infrastructure, with identities, data, APIs, tools and the ability to take action. This is what that means for cybersecurity, and why securing the AI itself is becoming just as important as defending against it.
Preparing for the CISSP in 2026
The CISSP is not a memory test. It is a test of judgment. After sitting the exam this year and finishing at 115 questions, it became clear that success depends less on recalling definitions and more on choosing the best answer in complex, risk-driven scenarios. For technical professionals especially, the challenge is shifting from an engineering mindset to a leadership perspective. If you have not applied security principles in the real world, you will struggle. This post shares practical, experience-based advice to help you prepare for the CISSP in 2026 with the right strategy and mindset.
My Decisive Journey to Using a YubiKey
Tired of relying on passwords that are about as secure as a paper bag in a rainstorm? So was I. In this post, I share my hilarious and eye-opening journey to adopting the YubiKey, a physical security key that upgraded my digital security from "meh" to "Fort Knox-level." From realizing my password manager wasn't enough to setting up this little device that’s now my digital sidekick, I’ll walk you through how the YubiKey transformed my online security—and why you might want to make the same change!
Peeking Under the Cloak: The Technical Wizardry Behind Monero
An in-depth technical overview of Monero's privacy architecture, including ring signatures, stealth addresses, RingCT, and the RandomX mining algorithm, presented with clarity and precision.
The Great British Phone Upgrade: New Mobile, Same Old Data Drama
Upgrading your mobile in the UK? It’s all fun and games until your old phone starts leaking secrets like a dodgy politician. From sneaky data leftovers to cloud chaos, here’s a witty but serious look at why your new phone shouldn't mean a new set of security headaches.
The Hilariously Secure History of AES Encryption
A Tale of Math, Spies, and Belgian Brilliance Once upon a time in the magical land of the 1970s, while bell-bottoms roamed the Earth and disco was considered acceptable behavior,…
Oops, They Got My Password: Now What?!
A Guide to Cleaning Up After a Credential Cyber Catastrophe So… your account got hacked. Maybe it was a sketchy Wi-Fi at that coffee shop. Maybe you reused the same…
Will MFA Save the Day? (Part 2) – Navigating the Current Cybersecurity
In Part 1 of this series, we discussed the rising importance of Multi-Factor Authentication (MFA) as a cybersecurity measure and the vulnerabilities that can weaken its effectiveness. But, as the…