Adam McHugh

Cybersecurity operations, engineering, and long-form analysis.

Workers SSR

D1 content

R2 media ready

Access admin

Latest output

Recent Posts

6 published
  1. ISM Statement of Applicability: Why It Should Be a Security Engineering Artefact, Not a Compliance Spreadsheet
  2. The Hierarchy of Remediation: A Practical Framework for Cybersecurity Resilience
  3. A Comprehensive Analysis of Attack Surface Reduction Rules as Compensatory Controls for Exploitation Primitives in Windows Environments
  4. From Vulnerable to Vigilant: Transforming Vulnerability Management Processes The vulnerability management landscape has become overwhelming. With over 25,000 CVEs published in 2022 alone, security teams are drowning in a sea of severity scores that often don’t reflect real-world risk. It’s time to move beyond traditional CVSS-based approaches and focus on what actually matters.
  5. Communicating Vulnerability Risks: Translating Technical Jargon into Business Impact
  6. Beyond NIST: Diversifying Sources for Accurate Vulnerability Context