Understanding the OWASP Top 10 for Large Language Model Applications
Artificial intelligence has introduced one of the biggest shifts in enterprise technology since organizations first moved to the cloud. Large Language Models (LLMs) are now […]
Part 1: Understanding AI Jailbreaks
Large Language Models have become far more capable over the past few years, but those improvements have introduced a new category of security problem. These […]
Microsoft’s MAI-Cyber-1-Flash Shows Where AI Security Is Heading
Artificial intelligence continues to reshape cybersecurity, not only in how organizations defend themselves but also in how security technologies are being built. Over the past […]
Why Identity Tiering Still Matters
For years, organizations have invested heavily in endpoint protection, multifactor authentication, Conditional Access, email security, and network controls. All of those technologies are important, but […]
Two Weeks, 5,000 Miles, Countless Memories, and a Much Needed Reminder That People Are Pretty Great
There is something about a road trip that changes your perspective. Maybe it is the endless hours staring through a windshield, maybe it is seeing […]
Microsoft’s Project Perception
Artificial intelligence has changed the cybersecurity landscape faster than most organizations anticipated. Over the past decade, security teams have become accustomed to protecting cloud environments, […]
Writing Better AI Prompts with the C.O.S.T.A.R. Framework
If you’ve spent any amount of time using AI, you’ve probably experienced both ends of the spectrum. Sometimes the response is exactly what you needed, […]
AI Prompt Frameworks Explained: A High-Level Guide to Choosing the Right One
If you’ve spent any time exploring AI over the past year, you’ve almost certainly come across prompt frameworks. Whether you’re using ChatGPT, Microsoft Copilot, Claude, […]
The Context-Shifting Bypass: A Worked Example
The common misconception is that AI red teaming is about finding one “magic prompt” that breaks a model, the social-media version. Professional AI security assessment […]
AI Red Teaming and Adversarial Testing – Building Enterprise AI Evaluation Frameworks (Part 6)
In the previous article, we shifted our focus from prompt engineering to behavioral analysis. Rather than treating prompts as isolated interactions, we explored how experienced […]
Microsoft 365 Enclave vs. Separate Tenant: Understanding the Difference and Why It Matters
One of the questions I hear most frequently from organizations beginning their CMMC journey is whether they should build a CMMC Level 2 enclave or […]
AI / CMMC / Compliance / Copilot / CUI / DFARS / DoD / DoW / FAR / FCI / FedRAMP / GCC-HIGH / NIST / Uncategorized
Microsoft 365 July 2026 Update
Over the past month, Microsoft has made several announcements worth every Microsoft 365 administrator’s attention. While many updates are incremental, a handful have the potential […]
AI / AI Security / CMMC / Compliance / Compliance / CUI / DFARS / DoD / DoW / FAR / FCI / FedRAMP / Microsoft Security / NIST
CMMC Phase II Is Suspended. Don’t Mistake That for a Reason to Stop Preparing
For the past several years, organizations supporting the U.S. Defense Industrial Base (DIB) have been working toward Cybersecurity Maturity Model Certification (CMMC). The phased rollout […]
Microsoft Is Retiring SMS and Voice Authentication in Microsoft Entra ID
If you’ve been following Microsoft’s identity roadmap over the past few years, this latest announcement shouldn’t come as a surprise. Microsoft has been steadily moving […]
AI Red Teaming and Adversarial Testing – Thinking Like an AI Red Team (Part 5)
In the previous articles in this series, we explored what AI red teaming is, why it has become an essential part of responsible AI development, […]
AI Red Teaming and Adversarial Testing – Practical AI Red Team Prompt Engineering (Part 4)
The common misconception is that AI red teaming is about finding one “magic prompt” that breaks a model, the social-media version. Professional AI security assessment […]
AI Red Teaming and Adversarial Testing: Evaluating AI Systems Under Adversarial Conditions (Part 3)
In Part 2, we focused on planning effective AI red team exercises by understanding the AI system, identifying business risks, developing realistic threat scenarios, and […]
How British Liberty Helped Shape American Freedom
Every 4th of July, Americans celebrate the Declaration of Independence as the bold birth certificate of a new nation. It is remembered as the moment […]
AI Red Teaming and Adversarial Testing: Designing Effective AI Red Team Exercises (Part 2)
In Part 1, we explored what AI red teaming is, how it differs from traditional penetration testing and governance activities, and why generative AI introduces […]
AI Red Teaming and Adversarial Testing: Building Safer and More Reliable AI Systems (Part 1)
Artificial Intelligence is becoming part of everyday business. Organizations are deploying Microsoft Copilot, ChatGPT Enterprise, GitHub Copilot, custom AI assistants, customer support bots, internal knowledge […]
Growing Older, Not Growing Old
Turning 50 is one of those strange milestones in life. It is just a number, but at the same time it is not. Hitting that […]
How HEFT Works in SharePoint Framework (SPFx)
While the commands used to build SharePoint Framework solutions may feel familiar, the engine powering them has fundamentally changed. HEFT introduces a structured, phase-based workflow […]
Getting Identities to Talk Across Tenants with Microsoft Entra Cross-Tenant Synchronization
If you have been working in Microsoft 365 for any length of time, you have probably run into a situation where you needed users from […]
Rethinking Conditional Access
Conditional Access is often treated like a set of firewall rules, but that approach only goes so far in a cloud-first world. This article breaks […]
SOCCER CLUB SEEKING SPONSORS FOR 2026
You may or may not know this, but I am the owner of a soccer club (I know my UK family and friends will tell […]