Blog
The Execution
The cybersecurity industry has spent decades and trillions of dollars building tools that operate after the fact.
Detect the breach. Respond to the incident. Recover the systems. Investigate the fraud.
Every one of those disciplines assumes the damage has already occurred and the goal is to limit it. Below, we examine what that assumption costs: real breaches, real losses, real organisations that did everything the industry told them to do and still lost. The question running through every post is the same: at the moment the consequential action executed, where was the human who should have stopped it?
600GB of Data. £7 Million to Recover. A National Institution Brought to Its Knees.
The British Library Ransomware Attack and the Cost of an Unguarded Execution Boundary
Read articleNIS2’s reporting obligation and the evidence problem that is not solved.
When You’re Under Attack, You’re Also Filing Paperwork.
Read articleThe Snowflake Credential Campaign and the Authentication Gap That Exposed Half a Billion Records
165 Organisations. One Method. No Vulnerability Required.
Read articleFour questions that predict which security categories survive AI. One category the framework missed.
Someone Built a Framework for Evaluating Security Products. GoFirm Passes Every Test.
Read articleThe Mandatory Human Approval Step. What Does It Actually Look Like?
BankInfoSecurity identified the right control for agentic AI risk. One sentence. No mechanism. Here is the mechanism.
Read articleFour Threats Where Attackers Have the Advantage. One Gap Underneath All of Them.
Gartner Just Described GoFirm's Entire Value Proposition.
Read articleThe Perimeter Was Never Breached. $46.7 Million Still Disappeared.
The Ubiquiti Networks Wire Fraud and the Control Nobody Had Built
Read articleThe ECB Is Telling Banks to Move Faster. They’re Running in the Wrong Direction.
AI has compressed the exploit window to thirty minutes. The entire industry response is downstream of the problem.
Read articleThe NCSC Told CNI Operators to Define Decision-Making Authority. Here Is What That Requires.
Severe cyber threat, pre-agreed authorisation, and the control the guidance doesn’t name.
Read articleHow a Teenager Brought Down MGM Resorts and What Should Have Stopped It
Ten Minutes. One Phone Call. $100 Million.
Read articleBlog content generation is AI assisted.