I often share shorter thoughts and observations on LinkedIn — ideas that are worth discussing, but don't necessarily need a full article.
You can browse a selection of those posts here, or visit my LinkedIn profile to see them all (and say “Hi”).
Longer insights, articles, and white papers live on the Insights page.
Why security is not about trusting or distrusting everything, but about engineering trust that is explicit, bounded, defensible, and able to change when the evidence does.
First shared on LinkedIn August 24th, 2026
Why judging AI or security tools without considering the operator and operating conditions can produce misleading conclusions about capability and risk.
First shared on LinkedIn August 19, 2026
Why internal location, secrecy, or expected knowledge should not be confused with authenticated identity and provenance.
First shared on LinkedIn August 17, 2026
Looking beyond 'AI escaped the lab' headlines to the security controls that determine what AI systems can access, do, and expose.
First shared on LinkedIn August 13, 2026
A Little Prince-inspired lesson about abstraction, programming, and the value of asking what is happening one layer below.
First shared on LinkedIn August 10, 2026
A reflection on how experience from different disciplines contributes to judgment, pattern recognition, and better security thinking.
First shared on LinkedIn June 2, 2026
An AI failure as an architecture lesson: excessive privilege and weak guardrails are dangerous regardless of whether the actor is human or machine.
First shared on LinkedIn May 15, 2026
Why AI governance should focus on creating safe, usable paths rather than relying on blanket prohibition and discovering shadow use later.
First shared on LinkedIn May 11, 2026
How AI-assisted security tools change the threat model by making advanced capabilities easier for both defenders and attackers to use.
First shared on LinkedIn May 7, 2026
How security teams can handle ambiguous or unverified incident reports without defaulting to either panic or dismissal.
First shared on LinkedIn May 1, 2026
A look at dynamic trust in third-party and security tooling: reputable tools still require ongoing verification.
First shared on LinkedIn April 29, 2026
Why cybersecurity increasingly functions as business infrastructure rather than a control layer added after the fact.
First shared on LinkedIn April 24, 2026
A practical approach to security frameworks on a limited budget: prioritize critical risks before attempting full-framework implementation.
First shared on LinkedIn April 13, 2026
A short reminder that security failures often come from neglected fundamentals rather than a lack of new tools.
First shared on LinkedIn April 10, 2026
Why supply-chain security has to account for failure, not only prevention: continuous validation, visibility, containment, and fast response.
First shared on LinkedIn April 6, 2026
A software supply-chain example showing how trusted publishing access can become the attack path without a vulnerability in the package itself.
First shared on LinkedIn April 1, 2026
Why keeping your professional profile current can be valuable even when you are not actively job hunting.
First shared on LinkedIn March 17, 2026
About
Cybersecurity consultant, coach, and mentor.
I help people and organizations make smarter, safer decisions online.
Contact
© Copyright 2025 - Joe Shachaf | Accessibility Statement | Privacy Policy | Terms of Service
