Sophos Threat Research / AI Research work

• Using AI to identify cybercrime masterminds
• DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
• A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist
• Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software
• The Sophos Annual Threat Report: Cybercrime on Main Street 2025
• Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream
• Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”
• Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces
• DeepSpeed: a tuning tool for large language models
• Sophos AI to present on how to defang malicious AI models at Black Hat Europe

Other reports can be found on my author page here.

Ars Technica (staff and recent freelance)

• Machine learning, concluded: Did the “no-code” tools beat manual analysis?
• Setting our heart-attack-predicting AI loose with “no-code” tools
• No code, no problem—we try to beat an AI at its own game with new tools
• How to make critical infrastructure safer—there’s a long way to go
• Information security gets personal: How to protect yourself and your stuff
• Securing your digital life, the finale: Debunking worthless “security” practices
• Securing your digital life, part three: How smartphones make us vulnerable
• What a “converged battlefield” means to the future of air… I mean, joint warfare
• Securing your digital life, part two: The bigger picture—and special circumstances
• Securing your digital life, part one: The basics
• Ars AI headline experiment finale—we came, we saw, we used a lot of compute time
• Our AI headline experiment continues: Did we break the machine?
• Feeding the machine: We give an AI some headlines and see what it does
• Is our machine learning? Ars takes a dip into artificial intelligence
• Old school: I work in DOS for an entire day
• SitRep: Is the F-35 officially a failure?
• Touch of gray: The Air Force can’t retire the Boeing 707
• The connected battlespace, part two: The fault in our (joint) stars
• The history of the connected battlespace, part one: Command, control, and conquer
• You can’t unsee Tedlexa, the Internet of Things/AI bear of your nightmares

A full archive of my work at Ars Technica can be found here.

Earlier works

As I find reliable archives of articles from Defense Systems, C4ISR, eWeek, , Baseline, Enterprise Developer and Java Pro, Information Week and GCN articles, I’ll post them here. But given the companies I wrote those articles for are mostly defunct…