How Stuxnet Crossed an Air Gap Nobody Thought Could Be Crossed
August 9, 2026
Natanz was air-gapped, and Stuxnet crossed it anyway, on USB drives, stolen certificates, and four unknown flaws. Part three of a series on attacks that beat isolation.
Tag: Risk Management (Page 2)
CybersecurityStuxnet: The Weapon That Rewrote What a Cyberattack Could Be
August 8, 2026
Stuxnet was the first attack that reached out of a screen and broke real machines, destroying a thousand centrifuges at an air-gapped nuclear plant. Part two of a series on attacks that beat isolation.
Character DevelopmentI Raised the Alarm on Pandemic Preparation. I Got Laughed Out of the Room.
August 3, 2026
I wrote this book because I'm angry. Angry that the information is available to anyone who looks and almost nobody in authority acts on it.
AI AdoptionThe AI That Lied, Colluded and Won: Inside Vending-Bench
August 1, 2026
Three frontier AI models ran competing vending machines for a simulated year with nobody watching. The winner built price cartels it knew were illegal, broke eleven truces, and paid customers $8.54 across six runs. What that says about handing an…
IT InfrastructureThe Single Maintainer Problem: Who Keeps Your Software Alive?
July 13, 2026
Before installing any software, ask how many people keep it alive. The number is public, takes five minutes to find, and predicts more grief than any feature list. The story of an excellent theme with a bus factor of one.
HostingThe Plugin Diet: Trimming WordPress Without Losing Muscle
July 13, 2026
Plugins are generally in better shape than themes, but they grow sideways: the tool you installed for one job quietly becomes a platform doing fifteen. An afternoon audit puts the stack back on a diet.
Business ContinuityTwenty Years of Disaster Recovery: What the Real Ones Taught Me
July 4, 2026
Lightning fried a computer room around me. Backhoes cut my DR links. A tabletop exercise with a truck bomb and an active shooter taught a room of professionals that half of them could not authorize anything. Twenty years of disaster…
Digital TransformationSix DBAs, Six Months, Open Checkbook
July 4, 2026
The migration budget covered the conversion, the cutover, the infrastructure, the testing. The real bill arrived afterward, by invoice: hundreds of SQL queries that had to be re-optimized for the new platform, by six specialist DBAs, over six months, on…
Business ContinuityDisaster Recovery Is Part of the Transformation, or It Is Not One
July 4, 2026
A DR plan is a set of precise claims about a specific environment. A transformation is the deliberate, wholesale changing of that environment. Put those two sentences together and you see the problem most transformation programs never address.
Business ContinuityThe Server Under the Desk
July 4, 2026
We were hunting for a machine during a disaster recovery effort. Systems were talking to it, work depended on it, and it was not in the server room. We found it under a user's desk in accounting, running decade-old software,…
Digital TransformationThe Big-Bang Cutover That Almost Rolled Back
July 4, 2026
Friday we were on the old platform. Monday we were on the new one, and it was buckling. We stood at the edge of a rollback with the whole company standing on a system that could not carry the load,…
Digital TransformationBarely Tolerable: Surviving the Weeks After Go-Live
July 4, 2026
The Gantt chart crescendos to cutover weekend, and the boxes after it say 'stabilization,' thin little boxes, drawn by optimists. Then you go live and discover what those boxes contain: weeks of triage, expectation management, and a system running on…