Sadly, most of the writing I have done for the Internet is no longer available online. But here are some links to works of mine that are.

• For the Team8 CISO Village, Editor on reports:
  • Regulation and the CISO – A Suggested Approach From the CISO Community
  • A CISOs Guide: Generative AI and ChatGPT Enterprise Risks
• For Ransomware.org/ActualTechMedia
  • Could Passkeys Finally Mean the End of Passwords?
  • Phishing Is Still Easy—and Effective
  • Webinar: Discovering Where Are You Most Vulnerable To Ransomware: From Phishing To Unpatched Servers, Find Your Weak Spots
  • Webinar: Exploring the Tools and Solutions That Comprise a Comprehensive Ransomware Strategy
  • Webinar: Discovering Where Are You Most Vulnerable To Ransomware: From Phishing To Unpatched Servers, Find Your Weak Spots
• Custom, Sponsored, “Ghostwriting,” PR/Marketing, Etc. – These articles and other writing projects appear everywhere, from vendor/agency sites to conventional publications. This includes everything from my-bylined to somebody else’s byline — typically a company executive — or no byline. Some are, or could be considered, journalism; others are arguably or even inarguably PR/marketing collateral. Nobody has ever told me to write something I don’t believe. Over the years, I’ve done PR projects for, directly or through agencies for Microsoft, HPE, Palo Alto Networks, Okta, Digicert, Mulesoft, Tanium, and Thales, and many others.
• For Pepperdata
  • eBook: Reducing Costs and Increasing Efficiency with Autonomous Big Data Optimization
• For Venafi
  • Comparing Capabilities of Venafi Jetstack Secure with Open Source cert-manager
  • eBook: Cloud Native Certificate Management – Exploring How cert-manager is Used in Kubernetes Production Environments
  • How to achieve FIPS 140-2 compliance for cert-manager
  • Global Bank Eliminates Kubernetes CertificateBased Outages with Venafi Jetstack Secure
  • Blogs:
    • China-Linked Cybercrime Group Attacks Asian Certificate Authority, Breaches Government Agencies
    • The CA/Browser Forum Won’t Yet Require HSMs Yet, But You Should
    • OpenSSL Update Patches High Severity Vulnerabilities
    • Keeping the Web Secure: Certificate Revocation Lists (CRLs) Rise from the Dead
    • Lloyds Backs Off Insurance for State-Sponsored Cyberattacks
    • Key Cryptography Standard Still Not Functional, FIPS 140-2 Going Out to Pasture
    • Study Shows Widespread Abuse of Code Signing Certificates
    • Microsoft Backs Off Internet Office Macro Ban [Update]
• Hewlett-Packard Enterprise (mostly available only from the Internet Archive now):
  • Simplify data management and turn your data into intelligence [no byline, but it’s me]
  • RPKI brings security, reliability to BGP routing
  • DNS security still an issue
  • Automation and artificial intelligence are the future of security, according to new report
  • Security and quantum computing: Planning next generation cryptography
  • With WebAuthn, web authentication is finally getting smart
  • WPA3: How and why the Wi-Fi standard matters
  • Windows cross-platform client software is hard to do
  • Serverless computing explained
  • Data encryption: How to avoid common workarounds
  • Say yes to the progressive web
  • The state of patch management
  • The case for and against decentralizing data for security
  • Open source vs. open standards: Know the difference
  • Can you really put your desktop in the cloud?
  • SHA-1 and the art of digital certificate management
  • Enterprise password management: A field guide

• 3 ways to monitor encrypted network traffic for malicious activity (for CSO)
• Top tools and resources for running a capture the flag competition (for CSO)
• A Secure Key Management Architecture for the Thales nShield Family of Hardware Security Modules (for Thales e-Security)
• Comparative review and analysis of web APIs for e-Signing services (for ProgrammableWeb/Mulesoft)
• Securing Your Private Keys as Best Practice for Code Signing Certificates (a 2010 post-Stuxnet white paper for Thawte)
• Articles on web API for Internet commands like whois (for ProgrammableWeb)
• Article on problems with VPNs and open Wi-Fi  (for Ars Technica)
• Feature on the potential for mobile websites to supplant native mobile apps (for Ars Technica)
• My work in Betanews
• Migrating to Office 365 (for InformationWeek)
• Hundreds of articles on ZDNet, mostly on security targeting enterprise IT
• White paper, infographic, and webinar on their “Windows to Go” devices (for IMation )
• The use of GOTO in modern programming (for Dr. Dobb’s Journal, I’m very proud of this one)