// under construction — some content may be incomplete

// reading

Bookshelf

Books that shaped my thinking on security, leadership, and the nature of adversaries.

The Art of Intrusion

Kevin Mitnick

Read
Offensive Security

"A masterclass in social engineering and physical penetration. Essential reading to understand the human element that technology can't patch."

Hacking: The Art of Exploitation

Jon Erickson

Read
Technical

"This book rewired how I think about systems. If you want to understand exploitation at the bit level, there's nothing better."

The Phoenix Project

Gene Kim, Kevin Behr, George Spafford

Read
Leadership

"A novel disguised as a DevOps lesson. The constraints and bottlenecks described mirror what I see in security teams. Required reading for sec leaders."

Sandworm

Andy Greenberg

Read
Threat Intelligence

"The most gripping account of nation-state cyber operations I've read. Sandworm's NotPetya campaign is a case study in cascading infrastructure failure."

Zero Trust Networks

Evan Gilman, Doug Barth

Read
Architecture

"The foundational text on zero trust. Dense but worth every page. I reference this constantly when architecting modern security programs."

The Threat Intelligence Handbook

CrowdStrike

Reading
Threat Intelligence

"Solid operational framework for building and scaling threat intelligence programs. Practical and grounded in real-world program maturity."

Cyber War

Richard Clarke, Robert Knake

Read
Policy

"Slightly dated but essential for understanding the geopolitical dimension of cyber conflict. The policy prescriptions are still being debated today."

The Cuckoo's Egg

Cliff Stoll

Read
History

"The OG cyber thriller. Stoll's 75 cent accounting error led to one of the first documented nation-state hacking cases. Timeless."