Books, articles, collaborative frameworks, research contributions and selected media appearances on cybersecurity, threat modelling, AI and related topics.
A business-oriented introduction to how AI changes cybersecurity and how cybersecurity shapes the adoption of AI, using case studies and discussion questions.
A General Paper assessment book. Publisher, publication year and a public link can be added when you have the bibliographic details to hand.
A practical framework focused on the business value of cybersecurity decisions and securing profits through better cyber-risk choices.
Examines reward-hacking behaviour and the way AI agents may attack systems that are useful stepping stones rather than their intended end targets.
Discusses the security implications of enterprise AI and agentic systems, including the need to understand how AI-enabled environments can be attacked.
Explores security challenges associated with agentic AI systems, including access to private data, untrusted content and external communication.
A conversation examining how AI affects cyber conflict and international stability through assumptions about speed, concentration, automation, responsibility and governance.
Argues that cybersecurity should be understood as a function of trust, including the social dimensions of digital ecosystems and long-term outcomes.
Explains why quantum computing is more than a cryptography issue and why organisations should consider its wider business implications.
Examines how threat modelling can help organisations move beyond compliance requirements to understand threats to critical infrastructure.
The third article in a series on post-quantum cryptography and organisational preparedness.
Introduces post-quantum cryptography and quantum key distribution for readers who need a grounding in the relevant concepts.
Explores how geopolitical context helps security practitioners reason about the likely motivations and activities of threat actors.
Considers whether market failure is present in the cybersecurity sector and how incentives shape supply and demand for security.
Introduces the risks that arise when organisations continue to depend on cryptographic algorithms that may not withstand future quantum capabilities.
Contributed practitioner perspectives to ISACA’s roundtable discussion of the 2025 State of Cybersecurity survey findings.
A collaborative account of the first Global Threat Model Together Day, bringing practitioners together across APAC, EMEA and the Americas.
A series of intentionally vulnerable machines created to help aspiring penetration testers learn through practical exercises, accompanied by notes on the development process.
A four-part video discussion series exploring the relationship between social science and cybersecurity.
A discussion of how work changed during the pandemic, employer–employee expectations and the future of hybrid and remote work.