by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Oct 20th, 2026
A last business post for now. If the SOC is becoming agentic, who should you recruit? The traditional SOC was built like a pyramid. Many junior analysts at the bottom handling alerts, fewer experienced ones in the middle doing investigations, and a few experts at the top. The juniors learned by doing the routine work, […]
Posted in Security Architecture, Security metrics, Technology on Oct 15th, 2026
In April I predicted a wave of patches over two to three years, followed by a lower level than before. Half a year later, let´s look at the numbers. This week Microsoft released 1,408 new CVEs in one Patch Tuesday. In all of 2025, Microsoft published 1,244. One month beat the whole of last year. […]
Posted in Security Architecture, Technology on Oct 9th, 2026
As I wrote at New Year, I am building a small gin distillery. I promised to keep security in it, and I have. Here is what security looks like when the whole IT department is me and three dachshunds. The production side is OT. The still has sensors for temperature and flow that log the […]
Posted in Security Architecture, Technology on Oct 7th, 2026
Agents now triage alerts, investigate incidents, find attack paths and propose fixes. Some of them act on their own. So what remains for the human analyst? I get that question from colleagues, from students and, honestly, from myself. Let me try an answer. Judgement. Deciding which risk to accept, which action is worth its business […]