August 17, 2026
Over the last year, I’ve watched AI models and tools that find vulnerabilities in code take a central role in security industry communications.
Every few weeks, a new product announcement promises impressive results, such as AI tools that detect SQL injection, spot memory corruption bugs, identify logic flaws at scale, or chain tens of known vulnerabilities together.
This can be impressive for attack purposes, but it is more an interesting novelty than defensive security.
Read More 
March 31, 2026
Over the last 20+ years in IT, I’ve seen automation evolve from a nice-to-have to a non-negotiable part of how organizations operate.
Every company I’ve worked with has some form of automation.
The problem is that, in many cases, what they have is not an automation strategy but rather a collection of individual scripts, cron jobs, and one-off solutions that were built to solve immediate problems.
This is what I usually call ad-hoc automation or point automation, and while it works in the short term, it creates significant issues over time.
This does not happen only in small or particularly tech-adverse companies; it is a very common situation across sectors and sizes.
Read More 
(Fabio Alessandro Locati|Fale)'s blog