Joshua Goldfarb

Even with careful and deliberate hiring, enterprise security teams will find themselves with a charlatan from time to time.

Willfully ignoring important security issues to make our lives easier is, unfortunately, something that does happen in the security field. 

How simplifying complexity, enhancing visibility, and empowering analysis can address key challenges in modern cybersecurity operations and investigations.

Five reasons why “Ambulance Chasing” and mocking harm the security profession and are never a good idea.

The introduction of AI can bring benefits to the enterprise while not introducing additional risk that is beyond acceptable levels.

By taking a data-driven approach to life, grounded in truth and facts, we can improve our chances of making better decisions and achieving better...

Honoring my father by translating his timeless life lessons into practical wisdom for the cybersecurity profession.

As a security industry, we need to focus our energies on those professionals among us who know how to walk the walk.

How can security practitioners make sense of the vendor landscape and separate those who talk a good game from those who can execute, perform,...

Security teams need to combine the angles of client-side and server-side detection in order to have the best chance of mitigating the risk of...

The most efficient and effective teams have healthy and constructive cultures that encourage team members to go above and beyond the call of duty.

More often than not, we are grateful for and celebrate the wrong people. It is incumbent on all of us to take the time...

When too much subjectivity is mixed into risk assessment, it can produce a risk picture that is not an accurate representation of reality. 

While there is quite a bit of buzz and hype around AI, it is a technology that can add tremendous value to security programs.

Learning how to keep discussions on-topic is an important skill for security professionals to learn, and it can allow them to continue to improve...

The complexity and challenge of distributed cloud environments often necessitate managing multiple infrastructure, technology, and security stacks, multiple policy engines, multiple sets of controls,...

Securing APIs is a noble, though complex journey. Security teams can leverage these 10 steps to help secure their APIs.

Staying the course and sticking to strategic goals allows security professionals to steadily and continually improve the security posture of their organization.

Learning how to spot the signs of narcissism and identify narcissists will help us ensure that we do not bring these people into our...

While there are likely many different approaches, here are a few points that are important for enterprises to consider when evaluating bot solutions.