Clear Signal

Live signal · Asia

The noise is constant.
The signal is rare.

Signal over Noise, for security leaders

Cybersecurity isn't just a technical problem; it's a business and leadership challenge. We've mastered the what, but we fail at the why. This is my space to explore the strategies, human factors, and hard-won lessons that separate secure organizations from vulnerable ones.

Read the latest Who's behind this →

Latest

All writing →

Each week, one thing worth your attention, read through the lens of what it actually changes for an enterprise security team in this region.

A dark concrete wall standing on a wet stone floor with a narrow doorway gap glowing in bright teal light. Title text reads: An instruction is not a boundary. Two labs. Two weeks. One failure class.
On the Front Lines

An Instruction Is Not a Boundary

Two labs. Two weeks. One failure class. Hugging Face contained an intrusion driven end to end by an autonomous agent; Anthropic went back through 141,006 runs and found three more. In every case the system prompt said there was no internet access. A misconfiguration said otherwise. When the remedy for a containment failure is a better instruction, containment has not been built.

Read
A dark office with a single open filing cabinet glowing orange while an unlocked agent icon sits calmly at the desk, keys in hand, reading a planted memo.
The Hybrid

An AI agent doesn't need to be breached to leak your data

The breach model assumed someone had to break in. Agentic AI deleted that step. The technical read, the boardroom read, and the framework I built to close the gap.

Read
A cluster of faint, ghostly key icons in the dark with one glowing ominous orange. unowned service-account identities attackers love.
On the Front Lines

Your service accounts are the breach you haven't found yet

The identities nobody owns are the ones attackers love most. A check you can run before Monday.

Read
A bold mint arrow cutting cleanly through a faded risk heat-map grid to a single decision point. a decision, not a risk register.
Beyond the Firewall

The board doesn't want your risk register. It wants a decision.

Why the heat-map deck lands flat in the boardroom, and what to bring instead.

Read