AI security · Threat intel · Building in public
I break down threats. Then I go build things.
I'm John Davies. Most people call me JD. By day I'm a Principal SE at Arctic Wolf, talking with security teams about what's actually hitting them. The rest of the time I write Security Signal and ship side projects with AI in the loop. This is where all of it lives.
AI security
Prompt injection, model supply chain, the OWASP LLM Top 10. Your org adopted AI faster than it adopted controls for it, and bad actors noticed.
Threat intel
Nation-state crews, new TTPs, the reports nobody has time to finish. I read them and tell you what changes on Monday morning.
Building
Native apps, automation, small SaaS. One person with AI can ship what used to take a team, and I'm finding out how far that goes.
Security Signal
Latest from the newsletter
The Security Bill on Data Centers in Orbit
The SpaceX IPO is a bet that AI compute has to leave the planet. Here's the attack surface that comes with it, and the third-party risk nobody's pricing in yet.
The AI Security Stack Has Three Problems, Not One
Why your DLP can't see Claude in Excel, and what the actual control points look like.
Zero Trust Has a Blind Spot. Here's What Fills It.
Everfox's CYBER360 report surveyed 500 security leaders. The findings expose why Zero Trust alone can't secure the modern digital battlespace, and what the cybersecurity trinity looks like.
Blog
From the workshop
Projects
What I'm building
Security Signal
I read the threat reports so you don't have to, then tell you what they actually mean for your Monday morning. AI security, nation-state activity, identity, supply chain.
Oracle
A native macOS app for running a 3D print farm. Queue jobs, watch printers, and stop babysitting a dozen browser tabs.
Sluice
Finds, triages and catalogs 3D-printing models into a NAS library, then hands them to the slicer. You spend time printing, not digging through downloads.