FILIP:OS Integrity: Is This Still the Machine We Installed?
Small Linux appliances do not become risky only when they fail. They become risky when nobody knows what changed.
Read article →Blog
All articles
Notes and essays about AI, security, software, infrastructure and digital life.
AI Governance Will Define the Next Decade
The future of AI will not be defined only by what systems can do, but by who can govern their risks, security, accountability and auditability.
Read article →AI in HR Is a Governance Risk, Not Just an HR Tool
When HR uses AI to screen, score or evaluate people, the question is not only whether it is useful, but whether it is legal, safe, fair and governed.
Read article →At 3:00 AM, Preparedness Becomes Cybersecurity
A server outage at 3:00 AM reveals whether cybersecurity exists as a real operating capability, not only as documentation.
Read article →Companies Are Building an Illusion of Security
Many companies spend thousands on cybersecurity tools, audits and certificates, but still lack ownership, decision-making and a managed security system.
Read article →FILIP:OS: Simple for the Operator, Strict on the Inside
FILIP:OS started from a simple frustration: Linux is powerful, but real operations too often become scattered scripts, manual fixes and unsafe commands.
Read article →From Polymorphic Viruses to Polymorphic Attacks
In 1994, the problem was a polymorphic virus. Today, the problem is polymorphic attacks. The technology changed, but the principle stayed familiar.
Read article →Having a Firewall Is Not the Same as Having Security
A firewall, antivirus, backups and logs are not enough. The real question is whether information security is owned, controlled, evidenced and repeatable.
Read article →How Much Does One Hour of Downtime Cost?
Before investing in firewalls, monitoring, backups or audits, companies should understand the real business cost of one hour of downtime.
Read article →IT Is the Nervous System of Corporate Responsibility
Modern IT is no longer a printer-support function. It connects legal, operational, manufacturing and cybersecurity responsibility into one risk space.
Read article →KYC Is Not Know Everything Forever
AML and KYC require customer due diligence, but they are not a blank cheque for uncontrolled data collection, AI scoring and permanent profiling.
Read article →OneHalf Was Not Theory. It Was Reality.
In 1994, dealing with the OneHalf polymorphic virus was not about frameworks or best practices. It was about understanding the mechanism and keeping systems working.
Read article →Security Starts by Admitting You Do Not Have It
If a company believes compliance, tools and a passed audit mean cybersecurity is under control, it may only have an illusion of security.
Read article →Six Things I Would Start With in a Company Without Cybersecurity
If I came into a company with no real cybersecurity, I would not start by buying tools or running an audit. I would start with ownership, decisions and control.
Read article →The Biggest Incident Response Failure Is Hesitation
The worst failure I have seen during a security incident was not technology. It was hesitation, unclear authority and loss of control.
Read article →Three Questions That Reveal Real Cybersecurity
The fastest way to test whether a company has real cybersecurity is not to ask about tools. It is to ask who decides, who communicates and who owns the impact.
Read article →Training Is Not Preparedness
Regular cybersecurity training may create certificates, but real security depends on whether people know how to react when something actually happens.
Read article →When the Server Goes Down at 3:00 AM
Monitoring tells you that something is wrong. Preparedness decides what happens next.
Read article →Who Audits AI Inside the Company?
Companies are adopting AI quickly, but the hard question is who can prove what tools are used, what data enters them, what decisions they influence and who is responsible.
Read article →Why IT Cannot Manage Cybersecurity Alone
Cybersecurity is not only a technical problem. It becomes real when IT and leadership are connected through decisions, risk ownership and business context.
Read article →WiFi Sensing for Server Room Intrusion Detection
A short note on using advanced WiFi Sensing and CSI to detect unknown people in critical infrastructure spaces without cameras.
Read article →