Home About Black Hat Contact Essays Fireside Chats My Take News Alerts Q&A Reels RSAC Videocasts ☰
 

Reels

 

STRATEGIC REEL: Certificate expiration is speeding up — outpacing legacy management

By Byron V. Acohido

The clock on digital trust is about to speed up — and many organizations are not prepared for what comes next.

Related: The Google Bazel tool outage

TLS certificates — the quiet backbone of secure online communication — are headed toward dramatically shorter lifespans, and organizations will have to keep pace.

Today, many certificates last more than a year. But under formal changes already advancing through the CA/Browser Forum, those lifecycles are shrinking in steps: from roughly 398 days to 200, then to 100, and ultimately to 47 days by 2029.

That compresses renewal windows, removes operational cushion, and raises stakes for uptime, reliability, and customer confidence.

In that reality, manual certificate management will not scale. Missed renewals don’t just create technical debt — they trigger outages, revenue loss, and cascading trust failures. The sustainable answer, DigiCert’s Ashley Stevenson explains, is modernization: consolidate fragmented environments, centralize visibility, and automate the lifecycle.

Organizations that treat this as a narrow compliance checklist may fall behind. Those that build platform-driven oversight — monitoring, policy enforcement, and automatic renewal — strengthen resilience and reduce business risk.

This is not a distant forecast. It is a near-term operational shift. And it recasts certificates from background plumbing into a live trust function that warrants executive attention.

Catch the full Strategic Reel above, part of Last Watchdog’s ongoing series on cybersecurity leadership.

Pulitzer Prize-winning business journalist Byron V. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.

(LW provides consulting services to the vendors we cover.)

Comment | Read | January 27th, 2026 | Reels | Top Stories

STRATEGIC REEL: Inside the ‘Mind of a Hacker’ — turning attacker logic against them

By Byron V. Acohido

API sprawl. Encrypted traffic. Hyperconnected users.

Today’s digital business surfaces present attackers with fertile ground—not for brute-force break-ins, but for subtle, sustained manipulation.

A10 Networks Field CISO Jamison Utter calls this shift “defending with the mind of a hacker.” It’s not about flagging obvious threats. It’s about tracking how risk accumulates when normal behavior quietly veers into abnormal territory.

In our latest Strategic Reel, Utter breaks down how attackers are now exploiting business logic itself. “The same requests every user makes” become entry points for reconnaissance. If an adversary learns to warp an API-driven workflow—say, delay a competitor’s supply chain—the impact becomes real-world disruption, not just digital noise.

Traditional defenses see black-and-white: permit or block. But 99% of traffic lives in the gray zone. That’s where today’s hackers thrive—and where defenders must follow.

Comment | Read | October 21st, 2025 | Reels | Top Stories

MY TAKE: Dispatch from OktoberTech 2025 — AI adoption is racing ahead, far outpacing control

By Byron V. Acohido

MOUNTAIN VIEW, Calif. — The crowd stirred when Ameca blinked.

Related:The emergent workflow cadences of GenAI

We were gathered inside the Computer History Museum at Infineon Technologies OktoberTech 2025 conference. Onstage, marketing chief Andreas Urschitz carried on a light chat with a humanoid robot whose gray face tilted and scrunched in near-human expression.

The effect was uncanny. Ameca nodded, reacted, and responded. The face moved subtly. Eyes shifted. The mouth tracked speech. There was even something like micro-expression happening — that ephemeral moment between thought and response expressed via  physical hardware.

Granted, Ameca’s body movements are limited and battery-hungry. And if you listen closely, the actual content of her replies — while grammatically flawless — isn’t all that different from what ChatGPT and Gemini routinely spit out. 

Comment | Read | October 19th, 2025 | My Take | Reels | Top Stories

STRATEGIC REEL: Proactive by design: Fortinet retools network defense for real-time threats

By Byron V. Acohido

Security teams can no longer afford to wait for alerts — not when cyberattacks unfold in milliseconds.

That’s the core warning from Fortinet’s Derek Manky in a new Last Watchdog Strategic Reel recorded at RSAC 2025. As adversaries adopt AI-driven tooling, defenders must rethink automation, exposure management, and the role of human analysts.

“We saw a 39% increase in CVEs last year — over 40,000,” Manky said. “Traditional automation can’t keep up. Attackers are scripting their next move before the first alert even fires.”

Manky describes how Fortinet is responding with simulation-based defense: continuous threat exposure testing, purple teaming, and the use of attacker playbooks — spoofed back at speed — to preempt compromise.

The result, he argues, is a more agile defense posture that relies less on headcount and more on adaptive technologies that amplify human insight.

“Tech that helps analysts move faster — that’s the path forward,” he said.

Comment | Read | August 2nd, 2025 | Reels | Top Stories

STRATEGIC REEL: From guesswork to ground truth — stopping threats before they spread

By Byron V. Acohido

In today’s post-signature world, attackers don’t just break in — they blend in. In this second installment of the Last Watchdog Strategic LinkedIn Reel (LW SLR) series, Corelight CEO Brian Dye delivers a clear-eyed take on how defenders can regain the upper hand with network-derived ground truth.

This high-impact reel distills key insights from our RSAC 2025 Fireside Chat, including how NDR empowers SOC teams to trace the full attack path — from initial access to containment — and to prove what really happened. One customer used Corelight to verify the true scope of a ransomware attack and reject a $10 million ransom demand.

The embedded LW SLR (above) captures the message in under a minute: in cybersecurity’s next chapter, knowing — not guessing — is everything.

Watch the reel above. To view the full podcast check out The NDR evolution story—from open source start to kill chain clarity

Acohido

 

Pulitzer Prize-winning business journalist Byron V. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.

(LW provides consulting services to the vendors we cover.)

Comment | Read | July 23rd, 2025 | Reels | Top Stories

STRATEGIC REEL: APIs are the new perimeter — and business logic attacks are slipping through

By Byron V. Acohido

APIs have become the digital glue of the enterprise — and attackers know it.

Related: API security – the big picture

In this debut edition of the Last Watchdog Strategic Reel (LWSR), A10 Networks’ Field CISO Jamison Utter cuts through the noise from RSAC 2025 with a sharp breakdown of today’s API threatscape.

From 15,000 APIs per enterprise to the illusion of “free” cloud security, Utter outlines how outdated defenses are failing where it matters most: the business logic layer.

He makes the case for a consolidated WAAP approach that unifies discovery, enforcement, bot defense, and logic-layer protection.

The embedded LWSR (above) distills the highlights in under a minute. Or feel free to view the YouTube Shorts version. It’s the first in a new series of mini-snapshot packages designed to amplify meaningful insight across YouTube, LinkedIn, and LastWatchdog.com.

To view the full podcast check out RSAC Fireside Chat: Attackers are exploiting gaps in business logic created by proliferation of APIs

Acohido

Pulitzer Prize-winning business journalist Byron V. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be.

(LW provides consulting services to the vendors we cover.)

 

 

Comment | Read | June 27th, 2025 | Reels | RSAC | Top Stories

RSAC Strategic Reel: Cyber experts on the front lines unpack ‘Shadow AI,’ ‘Ground Truth’

By Byron V. Acohido

The response to our first LastWatchdog Strategic Reel has been energizing — and telling.

Related: What is a cyber kill chain?

The appetite for crisp, credible insight is alive and well. As the LinkedIn algo picked up steam and auto-captioning kicked in, it became clear that this short-form format resonates. Not just because it’s fast — but because it respects the intelligence of the audience.

This second-day snapshot continues where we left off: amplifying frontline voices from RSAC 2025. What’s most striking is the consistency of message across these interviews. Whether from Fortinet or ESET, Corelight or Anomali, the theme is clear: GenAI is no longer theoretical. It’s here — and it’s already influencing how SOC teams operate, triage, and respond.

Each voice captured in this reel isn’t reading from a script. These are compressed bursts of clarity from senior technologists who live this reality every day.

The goal with Strategic Reels is simple: create a format that works at the speed of LinkedIn but doesn’t sacrifice substance. The result? A tool that helps thought leaders cut through the noise — and stay top of mind.

If this approach resonates with your team or client, reach out. There’s room in this series for more real voices, more credible takes — and more relevance, exactly when it’s needed.

Comment | Read | May 6th, 2025 | My Take | Reels | RSAC | Top Stories | Videos