The Cybersecurity Hub
Real security isn’t the tools, the dashboards or the audit checkboxes. It’s the boring work nobody wants to do and the human layer everybody forgets. These articles come from decades inside security operations.
No pitch. No pressure.
This hub is laid out in chapters, from what security leaders do to where security breaks, the attacks that proved it, and what to do about it. If you’re a security leader with a book in you, see my ghostwriting services or start smaller with the Book Discovery Intensive.
1. What security leaders do
2. Where security breaks
- ► The Human Layer Is Where Security Actually Breaks
- ► What Actually Gets Attacked First in a Cyberattack
- ► Most Security Tools Are Theater
- ► The Boring Security Work That Actually Keeps You Safe
- ► The Supply Chain Is the Attack Surface
- ► The Caribbean Connection: When a $90K Book Deal Became a $4K Overpayment Scam
- ► The $35K Ghostwriting Scam That Almost Fooled Me (And How It Could Fool You)
3. Nothing is isolated: thirteen attacks, one lesson
- ► The Morris Worm: The Night the Internet Learned to Distrust Itself
- ► Stuxnet: The Weapon That Rewrote What a Cyberattack Could Be
- ► How Stuxnet Crossed an Air Gap Nobody Thought Could Be Crossed
- ► After Stuxnet: The Weapons It Loosed on the World
- ► The Hezbollah Pager Attack: When the Device Itself Was the Weapon
- ► Going Low-Tech Didn't Save Them: The Pager Attack as a Supply Chain Lesson
- ► Crypto AG: The Company That Sold Spying as Security for Fifty Years
- ► Agent.btz: The USB Drive That Built US Cyber Command
- ► NotPetya: A Software Update That Cost the World Ten Billion Dollars
- ► SolarWinds: The Poisoned Update That Reached Eighteen Thousand Networks
- ► The Target Breach: How an HVAC Vendor Became a Path to the Registers
- ► The XZ Backdoor: Two Years of Patience, Caught by Luck
- ► Nothing Is Isolated: What Every One of These Attacks Says About AI
- ► Trump's AI Force Is a Fire Department With No Fire Code
4. Breaches and incident response
- ► My Own Site Got Hit: Anatomy of a WordPress Supply-Chain Attack
- ► The Ransomware Years: When Laptops Became Bricks
- ► The Virus That Crashed Our Own Email Server
- ► The Infection That Kept Coming Back
- ► The Morning I Found a Plugin I Never Installed
- ► The Hugging Face AI Agent Attack: An Operations Reading
- ► How a $3,000 Scam Became My Best Storytelling Lesson
- ► I Got Caught Hacking in 1981. The Professor Made Me Head of Security.
- ► Internet Trolls: The 16 Behaviors That Attract Them
- ► Software Testing: 10 Things Most Teams Get Wrong
- ► The Old Friend Who Suddenly Needed Money: A Scam I Spotted on Message One
- ► What 40 Years Online Taught Me About Staying Safe
5. Audits, compliance and insiders
- ► What Eight PCI Audits Taught Me About Real Security vs. Checkbox Security
- ► Home Computer Security: A Complete Guide from 33 Years in Enterprise IT
- ► The Auditor Who Graded Us on Spirit, Not Letter
- ► Eight Years of PCI Audits: The Most Thankless Heroics in IT
- ► Documenting Roles, Not Just Rules: A NIST Project That Got Personal
- ► The Consultant We Fired for Cracking Our Passwords
7. Preparedness and home defense
- ► When Hurricane Helene Grazed Clearwater: A Lesson in Backup Plans
- ► Bracing for Hurricane Milton While Cleaning Up After Helene
- ► Preparing for a Category 5: My Hurricane Milton Experience and Advice
- ► Hurricane Milton Was Truly Frightening: The Aftermath
- ► How to Audit Your Social Media | A Cybersecurity Perspective
- ► QR Codes for Authors 2026: Marketing Guide + Security Tips
- ► Behind the Book: Family Cybersecurity
- ► Phone Security for Writers: 8 Ways to Protect Your Work
8. Writing the security book
- ► What Executives Get Wrong About Cybersecurity Books
- ► The People Getting Attacked Are the Ones Nobody Writes For
- ► Cybersecurity Ghostwriting Beyond the Book: Articles, LinkedIn and Policies
- ► Cybersecurity FAQ
- ► Ghostwriting a Cloud Security Book in the Zero Trust Era
- ► I've been gang-attacked on Facebook, buried on YouTube, and harassed on LinkedIn
- ► The Freelancer's Scam Playbook: Three Cons Every Writer Should Recognize
- ► Will Publishing a Cybersecurity Book Help Attackers?
Thinking about a book of your own? Start with the Ghostwriting Hub. Related: Digital Transformation Hub, Disaster Recovery Hub, Technology of Writing Hub.
Frequently Asked Questions
Are you a security leader sitting on a book?
You have decades of judgment that nobody else has written down. A book turns that into authority. Let’s talk about getting it out of your head and onto the page.
No pitch. No pressure.
