ByBen HansonNovember 20, 2025 Rule of Two: New Subject, Same Old Mistakes You may have seen Meta’s “Rule of Two” floating around, as a mental model for agentic security. Don’t… Hero Security
ByBen HansonFebruary 6, 2025 AI Risks: Net-New or Amplifier? Track the risks. Just make sure that the risks are the actual risks, so that the problems you fix are the actual problems. Security
ByBen HansonMay 1, 2024 Vulnerability Management: Reactionary Security FUD At Its Worst There's no such thing as a critical vulnerability, generically. There's only a critical vulnerability that can be exploited in your environment, specifically. Security