- Cybersecurity industry analyst. - Professional listener to CISOs, occasional skeptic of vendors. - Former CISO. - Opinions mine, data-backed when possible.https://bsky.app/profile/danielkennedy74.bsky.socialhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mlonhmig7c2dThe recent announcement of the capabilities of the Mythos AI model have raised concerns about the cybersecurity implications of ever more powerful AI tools. @scott-crawford.bsky.social and I return to the podcast to debate the impact with host Eric Hanselman: https://www.youtube.com/watch?v=fl2r3cUVlDs12 May 2026 20:39 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mlonhmig7c2dhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mknubga3zc2qRSAC2026 considered agentic AI in situations where the price of hallucinations may be a wrong or destructive autonomous action in a live production environment. - https://www.spglobal.com/market-intelligence/en/news-insights/research/2026/04/rsac-conference-2026-confronting-both-the-promise-and-threat-of-agentic-ai29 Apr 2026 19:43 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mknubga3zc2qhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mjpoefx2nk25AI’s impact in security and its application are not always aligned - https://blog.451alliance.com/ais-impact-in-security-and-its-application-are-not-always-aligned/17 Apr 2026 19:37 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mjpoefx2nk25https://bsky.app/profile/danielkennedy74.bsky.social/post/3mijyyac2r22kFor the past three years, one of the highlights of my week at #RSAC2026 has been joining Matthew Schwartz in the ISMG News studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference: https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-3124002 Apr 2026 20:06 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mijyyac2r22khttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mijunxgsvs2k"It's going to get much worse. Just look at generated code, right? I mean, pull requests are getting bigger. The vulnerability mix is changing. It's not going down. How do we deal with that? How do we let people safely generate code from prompts?" https://www.databreachtoday.com/blogs/agentic-ai-uncertainty-dominates-dialog-at-rsac-conference-p-407702 Apr 2026 18:49 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mijunxgsvs2khttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mhj4zsmay22l𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗳𝗼𝗿 𝗔𝗜 𝗶𝘀 𝗰𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝗮𝗻 𝗲𝘅𝗽𝗲𝗿𝘁𝗶𝘀𝗲 𝗽𝗮𝗿𝗮𝗱𝗼𝘅 - https://blog.451alliance.com/security-for-ai-is-creating-an-enterprise-paradox/20 Mar 2026 18:21 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mhj4zsmay22lhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mheepvnwjs2fNext in Tech | Ep. 259: The RSAC Conference – Agents on The Loose. https://www.spglobal.com/market-intelligence/en/news-insights/podcasts/next-in-tech/next-in-tech-ep-259-the-rsac-conference-agents-on-the-loose18 Mar 2026 20:55 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mheepvnwjs2fhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3mcfhfkqyuk2yTransition from isolation to exposure brings evolving threats to IoT and OT systems - https://blog.451alliance.com/transition-from-isolation-to-exposure-brings-evolving-threats-to-iot-and-ot-systems/14 Jan 2026 16:09 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3mcfhfkqyuk2yhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3ma7aa57elk2sAny SecOps capabilities that can be automated or simplified represent opportunities for security services providers to dramatically streamline and improve MSS delivery. https://blog.451alliance.com/genai-is-strengthening-managed-security-services/17 Dec 2025 17:55 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3ma7aa57elk2shttps://bsky.app/profile/danielkennedy74.bsky.social/post/3m4vk5srat22i"Automating aspects of detection, analysis or response, including outside tool coordination and data retrieval, can streamline repeatable incident response tasks in chronically understaffed security operations centers (SOCs)." https://blog.451alliance.com/organizations-secops-practitioners-identify-key-benefits-of-genai/05 Nov 2025 17:10 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3m4vk5srat22ihttps://bsky.app/profile/danielkennedy74.bsky.social/post/3m2tztdtm3c2vRecent attacks amplify the need for software supply chain security - https://blog.451alliance.com/recent-attacks-amplify-the-need-for-software-supply-chain-security/10 Oct 2025 15:55 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3m2tztdtm3c2vhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lylm6zbni22rhttps://blog.451alliance.com/agentic-ai-complicates-an-already-complicated-picture-around-non-human-identities/11 Sep 2025 20:39 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lylm6zbni22rhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lwrpvgacfc2yThe annual “security summer camp” that is made up of the Black Hat and DefCon conferences is just past and the security analyst team, Scott Crawford, Dan Kennedy, Justin Lam & Mark Ehr, join host Eric Hanselman to examine what they saw and discuss the implications. https://open.spotify.com/episode/1itdjCH6lljrk1xkgvm8Vd19 Aug 2025 20:11 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lwrpvgacfc2yhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lwrlai7qzk2yReflections from Black Hat USA 2025 - https://www.linkedin.com/pulse/reflections-from-black-hat-usa-2025-daniel-kennedy-zgmle #BlackHat19 Aug 2025 18:48 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lwrlai7qzk2yhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3luktfethl22qUse of GenAI security solutions has spiked, continued uptake projected: https://blog.451alliance.com/use-of-genai-security-solutions-has-spiked-continued-uptake-projected/22 Jul 2025 15:35 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3luktfethl22qhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lspibosd6s2fTurns out it’s not the company clothing store…29 Jun 2025 01:09 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lspibosd6s2fhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lozkib6eqs2ihttps://apiiro.com/blog/webinar-recap-reimagining-application-security-posture-management/13 May 2025 03:34 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lozkib6eqs2ihttps://bsky.app/profile/danielkennedy74.bsky.social/post/3logrhenwq223I had the opportunity again this year at #RSAC to discuss my latest end user security research with @mathewjschwartz.bsky.social at the ISMG studio. Full interview: https://www.databreachtoday.com/ai-delivers-appsec-gains-but-ransomware-overconfidence-persists-a-2826505 May 2025 16:18 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3logrhenwq223https://bsky.app/profile/danielkennedy74.bsky.social/post/3loa36zfids24#RSAC 2025 - https://www.youtube.com/watch?v=F7GXejSZscM03 May 2025 00:24 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3loa36zfids24https://bsky.app/profile/danielkennedy74.bsky.social/post/3lo2klda7ck2pThank you to all who joined our 451 #RSAC breakfast this year, it was great catching up, however briefly.30 Apr 2025 19:43 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lo2klda7ck2phttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lnuyjjzuoc2pAs the RSA Conference kicks off this week, listen to our conference preview on the Next in Tech podcast: https://www.spglobal.com/market-intelligence/en/news-insights/podcasts/next-in-tech/next-in-tech-ep-215-rsa-conference-preview #rsac202528 Apr 2025 14:37 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lnuyjjzuoc2phttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lnehkbahbc27I recently had the opportunity to sit down with a couple of folks who have spent significant time working out real world challenges in enterprise application security programs, catch the replay here: https://event.on24.com/wcc/r/4907238/1AEA9038A2F030ACA225DF1D1794825422 Apr 2025 00:50 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lnehkbahbc27https://bsky.app/profile/danielkennedy74.bsky.social/post/3llhkutqn4s2qHow important are information security certifications? Almost half (47%) of respondents to our recent survey note certifications are very important, and they require job candidates to have them. Another 43% note they are somewhat important - https://blog.451alliance.com/security-talent-gap-cannot-be-expressed-in-job-numbers-alone/28 Mar 2025 19:38 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3llhkutqn4s2qhttps://bsky.app/profile/danielkennedy74.bsky.social/post/3ljdgg47msk27From an old hand, step 1 in the 'finding leakers' handbook is...don't announce you're looking for or have found leakers. I know you think it has a deterrence effect, it doesn't. You want folks to make mistakes and leave bread trails, not get better at leaking information. https://qz.com/meta-fires-20-employees-leaks-mark-zuckerberg-185176689401 Mar 2025 17:17 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3ljdgg47msk27https://bsky.app/profile/danielkennedy74.bsky.social/post/3ljbcjsk4sk2eLet's see, from what I'm reading you're making some demands here, somewhat impolitely, I just need to check a couple things... - Yup, not in my chain of command, ok, next thing... - You don't add value, either now or project to in the future... And there you go, right on the 'pay no mind' list. https://media.tenor.com/crbfB-oVLJEAAAAC/check-list-bj-novak.gif?hh=344&ww=35828 Feb 2025 21:02 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3ljbcjsk4sk2ehttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lhwcwahifs24"We have a new guideline in place, if you could just sign the form..." Gotcha, well I apologize, I have a process where I'm not allowed to 'just sign' anything I don't understand or agree with or that lacks the force of law, you understand, can't be upsetting the folks upstairs here at Kennedy Inc.11 Feb 2025 18:44 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lhwcwahifs24https://bsky.app/profile/danielkennedy74.bsky.social/post/3lgiujiux6c2t"SecOps managers said they were aware of but unable to investigate 43% of alerts they received through security operations center (SOC) tools.It's a number that has remained consistent over the years..." https://www.techtarget.com/searchitoperations/podcast/Cybersecurity-expertise-gaps-More-than-meets-the-eye24 Jan 2025 16:57 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lgiujiux6c2thttps://bsky.app/profile/danielkennedy74.bsky.social/post/3lft6nw4b722fTikTok replaced Vine, and if it’s banned something will replace it (YouTube shorts and Instagram reels among the options). All of these ‘it will be healthy’ takes…20 million kids aren’t going to walk outside and rub their eyes in the sun, and then ‘play until the street lights come on’.16 Jan 2025 02:00 +0000at://did:plc:axdlogb2e6ekrmjmqwthwj6a/app.bsky.feed.post/3lft6nw4b722f