Author

The Problem With How Most Organizations Approach Security Awareness

Every year, the numbers get worse. Breaches increase. Costs rise. The human element remains the most exploited vulnerability in virtually every attack chain. And every year, organizations respond by spending more on the same things that failed them the year before. I have trained security teams across the GCC, the

What 20 Years in Offensive Security Taught Me About How Companies Get Breached

I've conducted hundreds of penetration tests over the past two decades. I've sat across from CISOs, IT directors, and executive teams, sometimes hours after a breach, sometimes years before one, and the same patterns keep appearing. The tools change. The industries change. The company sizes change.

Why Certifications Alone Won't Make You a Good Hacker

I've been in offensive security for over 20 years. I've trained teams at IBM, Palo Alto Networks, and the US Navy. And one of the most consistent patterns I've seen across every level, every country, every organization is this: passing a certification exam and