Public Appearances

“2026 will represent a clear shift from AI exploration to sustained operational deployment, particularly around AI agents and agentic systems. Traditional security tools are not designed to govern systems that make autonomous decisions, dynamically chain tools, or operate continuously with evolving context.”

“Because ISPs serve millions of people and underpin critical communications, security failures carry societal and national security implications, not just technical ones. Disruption or abuse of these networks can affect public trust, service continuity and the broader information environment.”

“The plan being proposed is timely given today's cyber threat landscape. Heightening geopolitical tensions worldwide, combined with the rapid advancement of artificial intelligence, are materially changing both the volume and sophistication of cyber attacks.”

“The line between the public and private sectors is also increasingly thin. Essential public services depend heavily on privately operated companies, meaning failures in one domain quickly affect the other. Treating private sector cybersecurity as a national security concern is therefore both forward-thinking and prudent.”

“When a telecommunications provider experiences a potential breach, the impact reaches well beyond the company itself. Internet service providers support everyday communication and commerce, and access to their systems can expose customer information at a significant scale.”

“Dohdoor exploits a gap that sits directly between two categories of security tooling: DNS monitoring tools are watching traffic on port 53. They are not inspecting HTTPS. Next generation firewalls and deep packet inspection tools are watching web traffic and encrypted sessions. They are not looking for DNS queries embedded inside that HTTPS. Neither set of tools is broken. The problem is that Dohdoor was built to live in the blind spot between them.”

“The Lazarus Group's use of Medusa ransomware represents a clear signal that nation-state backed cybercrime has fully industrialized. State actors are no longer building every tool from scratch. They are acquiring capabilities off-the-shelf, the same way any business scales operations. Defenders have to plan for adversaries that can scale faster than traditional security programs can.”