Northwoods Security Notes
Latest thoughts on startup security, vCISO leadership, and risk.
Stop Building Higher Walls: Why 2026 Is the Year of Resilience
How to shift the priority away from prevention
1/5/2026
Read on Substack →
The AI Paradox: Why Hyper-Efficiency Could Mean More Human Work
How a 19th-century economic theory can inform our thinking about AI and the future of work.
12/2/2025
Read on Substack →
When AI Became the Weapon
Lessons from the First Major AI-Powered Cyberattack
11/22/2025
Read on Substack →
You already hired your first security leader.
Surprise: they think they’re your DevOps engineer. 🛡️
10/1/2025
Read on Substack →
DeepSeek: A cautionary tale
How to separate the hype from the risk around DeepSeek AI
9/15/2025
Read on Substack →
The First 10 Security Controls for a Seed-Stage Team
Ten controls you can ship in weeks—not quarters—with clear owners and first steps.
9/14/2025
Read on Substack →
Welcome to Northwoods Security Notes
Plain-English security for Seed–Series B teams. Short, pragmatic posts you can act on this week.
9/14/2025
Read on Substack →

