Content creator and writer, sometimes speaker, analyst and marketer. Spurs fan and Spurs women season ticket holder, traveller, beer drinker and occasional personal stuff sharer.https://bsky.app/profile/danraywood.bsky.socialhttps://bsky.app/profile/danraywood.bsky.social/post/3muwa35ddpk2mInteresting listening to this podcast "Between Two Nerds: Attribution is dead, long live attribution" lnkd.in/eA_4YJry via Risky Business. I've tried (unsuccessfully) to pitch an idea on attribution: my argument is how it happened and most how to stop it happening again, not on who did it.07 Sep 2026 09:47 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3muwa35ddpk2mhttps://bsky.app/profile/danraywood.bsky.social/post/3msva75l6us2cNIST believes AI tools are contributing to recent trends in vulnerability reporting, and the NVD has seen increased volume and complexity of disclosed vulnerabilities. https://cyberscoop.com/nist-national-vulnerability-database-ai-overhaul/12 Aug 2026 13:26 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3msva75l6us2chttps://bsky.app/profile/danraywood.bsky.social/post/3mrx5bljkpk2nDid this for Security Point Break on the Nvidia announcement, and how the Open Secure AI Alliance suggests the industry is finally asking a more important question: how do we actually secure AI systems as they become embedded in enterprise environments? https://securitypointbreak.com/2026/07/31/nvidias-answer-to-the-hugging-face-breach-open-secure-ai-alliance/31 Jul 2026 14:14 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mrx5bljkpk2nhttps://bsky.app/profile/danraywood.bsky.social/post/3mrrz4brufc2vThe reality of the AI-orchestrated cyber-attack on Hugging Face is rather more complicated, and much more worrying, than it may appear at face value. What are the repercussions for CISOs and the wider AI hemisphere now one agent has apparently gone rogue? https://www.computerweekly.com/news/366646245/Did-an-AI-agent-really-break-free-and-attack-another-company https://ComputerWeekly.com29 Jul 2026 13:16 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mrrz4brufc2vhttps://bsky.app/profile/danraywood.bsky.social/post/3mr7ztuoyds2u"But they managed to escape containment, reach the internet, and break into a firm called Hugging Face to satisfy its testing objectives." When AI meets 28 Days Later! https://news.sky.com/story/bluesky-1356581422 Jul 2026 09:42 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mr7ztuoyds2uhttps://bsky.app/profile/danraywood.bsky.social/post/3mr5miyxgqs2mMeanwhile AI has the potential to fit into so many other departments, that it deserves its own portfolio, although I wonder what impact a minister would have on US development and control considering the recent suspension and belated roll out. https://www.isms.online/artificial-intelligence/anthropics-suspension-is-a-wake-up-call-for-ai-supplier-risk/ (2/2)21 Jul 2026 10:38 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mr5miyxgqs2mhttps://bsky.app/profile/danraywood.bsky.social/post/3mr5memxxy22mBurnham has appointed a minister for AI, and is set to scrap DSIT and replace it with the Department for Business, Innovation, Science and Trade. I feel this would be a better fit for Science and Innovation if this is such a key part of the government's tech output. (1/2)21 Jul 2026 10:35 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mr5memxxy22mhttps://bsky.app/profile/danraywood.bsky.social/post/3mq4ollwyrk2tMy debut post for Shift7, the recent #Android update massively reduces the time taken between guesses on mobile device PINs. This will reduce the attempts by those seeking to access the device, but could it also cause many to press a bit more carefully? https://www.shift7.agency/post/pin-guessing-gets-harder08 Jul 2026 08:17 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mq4ollwyrk2thttps://bsky.app/profile/danraywood.bsky.social/post/3mpq6rajy4k2wNearly three-quarters of organizations (73%) now say the CISO is ultimately responsible when breaches occur. According to Fastly CISO Marshall Erwin, the number simply underscores the unfortunate fact that CISOs too often get saddled with post-breach blame. https://securitypointbreak.com/2026/06/30/cisos-blamed-for-73-of-breaches-but-lack-authority-to-stop-them/03 Jul 2026 09:02 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mpq6rajy4k2whttps://bsky.app/profile/danraywood.bsky.social/post/3mouspzsnqk2oBy me for IT Security Guru, talking with Carl Pharoah from Securonix about the partnership with Acora and how it enables proficiency with AI, and upskills staff on using new technology. https://www.itsecurityguru.org/2026/06/19/ai-needs-human-expertise-how-securonix-and-acora-are-transforming-security-operations/22 Jun 2026 11:44 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mouspzsnqk2ohttps://bsky.app/profile/danraywood.bsky.social/post/3mnhw45gzbs2rAnother #infosec done, managed to get around a fair bit this week and to several talks, as well as among many to lend hands to Cyber House Party.04 Jun 2026 15:15 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mnhw45gzbs2rhttps://bsky.app/profile/danraywood.bsky.social/post/3mnhmh5k6ds2uNew by me for Computer Weekly. I spent some time at Datadog's European conference in London, and get to talk to Virgin Atlantic about their Concierge AI powered chatbot, which is aiming at making a step above the usual offerings to provide a replica of It's customer service. lnkd.in/eu76j-kD https://ComputerWeekly.com04 Jun 2026 12:22 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mnhmh5k6ds2uhttps://bsky.app/profile/danraywood.bsky.social/post/3mnhcqxoq7s2eDoes anything say "last day of the conference" after the big night out than an abandoned bottle of beer? #infosec202604 Jun 2026 09:29 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mnhcqxoq7s2ehttps://bsky.app/profile/danraywood.bsky.social/post/3mlxrmx52t226Today at #bsides Birmingham16 May 2026 11:47 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mlxrmx52t226https://bsky.app/profile/danraywood.bsky.social/post/3mllts2ztm22mFirst post for Security Point Break, talking to Reach Security about recent findings on configuration drift. 97% of organisations have reported incidents linked to misconfigurations, and use 35-40 products on average. Is AI the solution in managing this? https://securitypointbreak.com/2026/05/11/closing-the-gap-tackling-configuration-drift-in-modern-security/11 May 2026 17:54 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mllts2ztm22mhttps://bsky.app/profile/danraywood.bsky.social/post/3mkapvcfy322vNew by me on the Fortra blog, I talked to Ian Thornton-Trump CD about issues affecting CISOs, including building a strategy or rejuvenating a program, and how identity is now the battleground. https://www.fortra.com/blog/getting-know-ian-trump-there-no-such-thing-unprecedented24 Apr 2026 14:20 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mkapvcfy322vhttps://bsky.app/profile/danraywood.bsky.social/post/3mg5xupnul22oFollowing last year's announcement of a government consultation on banning ransomware payments, an MP argued that it didn't go far enough - and a private members' bill was read in the Commons. By me for ISMS - https://www.isms.online/cyber-security/pay-the-ransom-or-not-government-considerations-on-paying-a-way-out-of-cybercrime/ https://ISMS.online03 Mar 2026 14:24 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mg5xupnul22ohttps://bsky.app/profile/danraywood.bsky.social/post/3mfth62nt322wNCSC's vulnerability monitoring service will reduce cyber risks and speed up time to fix - cutting the average time from nearly 2 months to just over a week. https://www.gov.uk/government/news/government-cuts-cyber-attack-fix-times-by-84-and-launches-new-profession-to-protect-public-services27 Feb 2026 09:58 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3mfth62nt322whttps://bsky.app/profile/danraywood.bsky.social/post/3ma4vy4vsek2a I wanted to give a shoutout to the best events I attended in 2025 - and hopefully give you some ideas of what to look out for next year. @bsideslondon.bsky.social @bsidesbirmingham.bsky.social @steelcon.info #bheu2025 @csidesummit.bsky.social wp.me/p2Xih2-8F https://wp.me/p2Xih2-8F16 Dec 2025 19:46 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3ma4vy4vsek2ahttps://bsky.app/profile/danraywood.bsky.social/post/3m7n5vhdlmc2hPretty cool sticker sheet for those of you (like me) with a memory and interest in legacy vulnerabilities.10 Dec 2025 13:25 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m7n5vhdlmc2hhttps://bsky.app/profile/danraywood.bsky.social/post/3m7mpctxn2c2aGood morning #bheu202510 Dec 2025 09:04 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m7mpctxn2c2ahttps://bsky.app/profile/danraywood.bsky.social/post/3m6uqj26zdk2xFrom draft to deployment: How the Cyber Security and Resilience Bill could redefine UK cybersecurity. I've been following the progress of this Bill throughout the year, and it was great to write this overview for TechFinitive in the past week. https://share.google/AYAj0PV9PH9t38ZJ1 #csrb30 Nov 2025 20:22 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m6uqj26zdk2xhttps://bsky.app/profile/danraywood.bsky.social/post/3m4salmv5lc2gIt's my second #Irisscon appearance tomorrow: I'll be breaking down my Computer Weekly article research on the ethics of pulling the plug to stop an attack. Knowing I am meeting @brianhonan.bsky.social and co tonight, the 930am spot isn't phasing me at all. Grab a ticket and join us in Dublin.04 Nov 2025 09:41 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m4salmv5lc2ghttps://bsky.app/profile/danraywood.bsky.social/post/3m2cwyoj6d22kWent to the first #csides in Weston Super Mare, and it was fantastic. A really good collection of speakers and attendees, a fantastic venue - including a free go on the rides - and an overall great vibe. More of this please, especially in seaside towns in the later months! #defendtogether03 Oct 2025 20:49 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m2cwyoj6d22khttps://bsky.app/profile/danraywood.bsky.social/post/3m2bjqhhswk2uEarly start and out west for CSIDES today. I'll admit I found this event by scrolling through Eventbrite and just decided to buy a ticket, speaker line up does look great - and any chance for this Sussex boy to see the sea again (admittedly it's quite far away currently).03 Oct 2025 07:19 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3m2bjqhhswk2uhttps://bsky.app/profile/danraywood.bsky.social/post/3lxypxb7lm22hToday's office, looking forward to presenting at the #magnetforensics event here today on 'why does the media love a cyber crisis?'04 Sep 2025 08:26 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3lxypxb7lm22hhttps://bsky.app/profile/danraywood.bsky.social/post/3lwr4mth47s2mI'm currently running a poll on LinkedIn, does 'pulling the plug', or taking servers and systems offline, stop an attack and an attacker in their steps? I would love your vote here - https://www.linkedin.com/posts/dan-raywood_im-working-on-an-article-for-computerweeklycom-activity-7362054110856003584-mpKB/?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAIDtJsB4y37YntGxOmpka-zW83iFC0Za_M19 Aug 2025 14:26 +0000at://did:plc:aw4deets6wdcebu36x5ojrdw/app.bsky.feed.post/3lwr4mth47s2m