Sign in Subscribe

Brian Weidner

Project Glasswing & Claude Mythos: What CISOs Need to Know Right Now

Project Glasswing & Claude Mythos: What CISOs Need to Know Right Now

Anthropic just released the most capable offensive cybersecurity AI ever built, found thousands of previously unknown zero-day vulnerabilities across every major operating system and browser, and then decided the model was too dangerous to release to the public. That is not a hypothetical scenario. That is what happened on

AI Governance Deep Dive: Building the Committee That Actually Governs

AI Governance Deep Dive: Building the Committee That Actually Governs

The first AI governance committee meeting I ever sat in lasted two hours and accomplished almost nothing. We had twelve people in the room — IT, Legal, HR, a couple of business unit leaders, and a handful of security folks. Everyone had opinions. No one had authority. The agenda was a

Stop Scanning. Start Managing Exposure: The CISO's Guide to Continuous Threat Exposure Management

Stop Scanning. Start Managing Exposure: The CISO's Guide to Continuous Threat Exposure Management

Picture this: It is a Tuesday afternoon. Your vulnerability management team pulls up the weekly report. Sixty-three thousand open vulnerabilities across your environment. Your patch team closes out five hundred this week — a solid sprint by any measure. Everyone nods. The meeting ends. You walk out feeling like you

White House National AI Policy Framework: What CISOs Need to Know and Do Now

White House National AI Policy Framework: What CISOs Need to Know and Do Now

The White House released its National Policy Framework for Artificial Intelligence on March 20, 2026, and every CISO needs to read past the headlines. The document is not a law. It is not a regulation. It is a set of legislative recommendations directed at Congress — non-binding by design — outlining

IAM Metrics in Practice: Real Numbers, Real Scenarios, Real Conversations

IAM Metrics in Practice: Real Numbers, Real Scenarios, Real Conversations

A companion post to: IAM Metrics That Actually Matter: Proving Risk Reduction and Value to Every Level of the Organization The previous post laid out the framework: which IAM metrics matter, why they matter, and how to use them to tell a risk reduction and value story that resonates at

OpenClaw and Personal AI Assistants: Emerging Threats and What CISOs Need to Do Now

OpenClaw and Personal AI Assistants: Emerging Threats and What CISOs Need to Do Now

OpenClaw became the fastest-growing GitHub project in history almost overnight. It crossed 300,000 stars in early 2026, surpassing milestones that took Linux and React years to reach. That kind of adoption velocity is a signal security teams cannot afford to miss — because it means OpenClaw is almost certainly

IAM Metrics That Actually Matter: Proving Risk Reduction and Value to Every Level of the Organization

IAM Metrics That Actually Matter: Proving Risk Reduction and Value to Every Level of the Organization

I have been in information security for more than twenty years, and one of the conversations I have had more times than I can count goes something like this: the security team has spent eighteen months building out an identity and access management program. They have deployed a new IGA