Cybersecurity Resource Center
The Cybersecurity Hub
Real security isn’t the tools, the dashboards or the audit checkboxes. It’s the boring work nobody wants to do and the human layer everybody forgets. These articles come from decades inside security operations.
No pitch. No pressure.
This hub is laid out in chapters, from what security leaders do to where security breaks, the attacks that proved it, and what to do about it. If you’re a security leader with a book in you, see my ghostwriting services or start smaller with the Book Discovery Intensive.
1. What security leaders do
2. Where security breaks
- ► The Human Layer Is Where Security Actually Breaks
- ► What Actually Gets Attacked First in a Cyberattack
- ► Most Security Tools Are Theater
- ► The Boring Security Work That Actually Keeps You Safe
- ► The Supply Chain Is the Attack Surface
- ► The Caribbean Connection: When a $90K Book Deal Became a $4K Overpayment Scam
- ► The $35K Ghostwriting Scam That Almost Fooled Me (And How It Could Fool You)
- ► AI Companies Are Preparing for a Catastrophe. Which One?
3. Nothing is isolated: thirteen attacks, one lesson
- ► The Morris Worm: The Night the Internet Learned to Distrust Itself
- ► Stuxnet: The Weapon That Rewrote What a Cyberattack Could Be
- ► How Stuxnet Crossed an Air Gap Nobody Thought Could Be Crossed
- ► After Stuxnet: The Weapons It Loosed on the World
- ► The Hezbollah Pager Attack: When the Device Itself Was the Weapon
- ► Going Low-Tech Didn't Save Them: The Pager Attack as a Supply Chain Lesson
- ► Crypto AG: The Company That Sold Spying as Security for Fifty Years
- ► Agent.btz: The USB Drive That Built US Cyber Command
- ► NotPetya: A Software Update That Cost the World Ten Billion Dollars
- ► SolarWinds: The Poisoned Update That Reached Eighteen Thousand Networks
- ► The Target Breach: How an HVAC Vendor Became a Path to the Registers
- ► The XZ Backdoor: Two Years of Patience, Caught by Luck
- ► Nothing Is Isolated: What Every One of These Attacks Says About AI
- ► Trump's AI Force Is a Fire Department With No Fire Code
4. Breaches and incident response
- ► My Own Site Got Hit: Anatomy of a WordPress Supply-Chain Attack
- ► The Ransomware Years: When Laptops Became Bricks
- ► The Virus That Crashed Our Own Email Server
- ► The Infection That Kept Coming Back
- ► The Morning I Found a Plugin I Never Installed
- ► The Hugging Face AI Agent Attack: An Operations Reading
- ► How a $3,000 Scam Became My Best Storytelling Lesson
- ► I Got Caught Hacking in 1981. The Professor Made Me Head of Security.
- ► Internet Trolls: The 16 Behaviors That Attract Them
- ► Software Testing: 10 Things Most Teams Get Wrong
- ► The Old Friend Who Suddenly Needed Money: A Scam I Spotted on Message One
- ► What 40 Years Online Taught Me About Staying Safe
5. Audits, compliance and insiders
- ► What Eight PCI Audits Taught Me About Real Security vs. Checkbox Security
- ► Home Computer Security: A Complete Guide from 33 Years in Enterprise IT
- ► The Auditor Who Graded Us on Spirit, Not Letter
- ► Eight Years of PCI Audits: The Most Thankless Heroics in IT
- ► Documenting Roles, Not Just Rules: A NIST Project That Got Personal
- ► The Consultant We Fired for Cracking Our Passwords
7. Preparedness and home defense
- ► When Hurricane Helene Grazed Clearwater: A Lesson in Backup Plans
- ► Bracing for Hurricane Milton While Cleaning Up After Helene
- ► Preparing for a Category 5: My Hurricane Milton Experience and Advice
- ► Hurricane Milton Was Truly Frightening: The Aftermath
- ► How to Audit Your Social Media | A Cybersecurity Perspective
- ► QR Codes for Authors 2026: Marketing Guide + Security Tips
- ► Behind the Book: Family Cybersecurity
- ► Phone Security for Writers: 8 Ways to Protect Your Work
- ► My Smart Speaker Took Over a Device I Never Connected
8. Writing the security book
- ► What Executives Get Wrong About Cybersecurity Books
- ► The People Getting Attacked Are the Ones Nobody Writes For
- ► Cybersecurity Ghostwriting Beyond the Book: Articles, LinkedIn and Policies
- ► Cybersecurity FAQ
- ► Ghostwriting a Cloud Security Book in the Zero Trust Era
- ► I've been gang-attacked on Facebook, buried on YouTube, and harassed on LinkedIn
- ► The Freelancer's Scam Playbook: Three Cons Every Writer Should Recognize
- ► Will Publishing a Cybersecurity Book Help Attackers?
Thinking about a book of your own? Start with the Ghostwriting Hub. Related: Digital Transformation Hub, Disaster Recovery Hub, Technology of Writing Hub.
Frequently Asked Questions
Where does security usually break?
At the human layer. Firewalls and patches can all be solid, and a phishing email or a helpful employee still lets an attacker in.
Are security audits the same as being secure?
No. An audit proves you met a standard on the day it was checked. Security is the unglamorous work that keeps happening between audits.
Will publishing a cybersecurity book help attackers?
No. Attackers already have the techniques. A good security book sells the author’s judgment and experience, and an attacker can’t use either one.
What experience does Richard Lowe have in security?
Thirty-three years in enterprise IT, including 20 years as Director of Computer Operations and Technical Services at Trader Joe’s, with responsibility for PCI audits, disaster recovery and security operations.
Are you a security leader sitting on a book?
You have decades of judgment that nobody else has written down. A book turns that into authority. Let’s talk about getting it out of your head and onto the page.
No pitch. No pressure.
