Tag: cybersecurity

  • Welcome to ToddHDow Studios

    Welcome to ToddHDow Studios

    Adjust the existing cinematic workspace image to a wider, landscape orientation suitable for full-width display. Keep all current visual elements exactly the same: 12.9-inch iPad Pro with Logitech keyboard (no number pad), Apple Pencil and mug on the left side, and the WordPress writer’s workflow visible on the screen. Maintain the same dark, moody lighting, dramatic atmosphere, and realistic reflections. Expand the horizontal composition naturally, adding subtle desk and background detail on the sides so it feels intentionally framed for widescreen rather than cropped.

    ToddHDow.com has been part of my life for more than twenty years.

    Over that time it’s been a personal website, a résumé, a place to share projects, and occasionally a home for whatever happened to capture my attention at the time.

    If you’ve visited before, you might notice that things look a little different.

    Not because I’ve started over.

    Because I’ve finally decided to become intentional about where I’m headed.

    For years I’ve talked about writing novels, building worlds, running memorable tabletop RPG campaigns, and exploring the ideas that have fascinated me throughout my life. Those dreams always existed somewhere in the background, squeezed into evenings, weekends, and the occasional burst of inspiration between the demands of career and family.

    Eventually I realized something.

    If I was ever going to take writing seriously, I had to stop treating it like something I fit into the margins of life.

    It deserved the same commitment I’d given my career.

    ToddHDow Studios is that commitment.

    It isn’t a new beginning.

    It’s the next chapter.

    Following the Thread

    I’ve never been particularly good at having just one hobby.

    What I’ve always enjoyed is understanding how things work.

    Sometimes that’s a cyber attack.

    Sometimes it’s a medieval battle.

    Sometimes it’s a fantasy world.

    Sometimes it’s a beautifully crafted collector’s edition sitting on a bookshelf.

    Once something captures my imagination, I tend to dive in completely.

    I’m a lifelong reader and, admittedly, a bit of a book collector. Stephen King’s early novels, the Fighting Fantasy books by Steve Jackson that first taught me how stories could branch based on my decisions, epic fantasy like Brandon Sanderson’s Stormlight Archive and Robert Jordan’s Wheel of Time, modern favourites like Dungeon Crawler Carl—my shelves are filled with stories that reward curiosity and immerse you in carefully built worlds.

    That same curiosity spills into technology. I spend time experimenting with artificial intelligence, software-defined radios, emerging cybersecurity tools, and whatever new technology catches my attention. Not because I need another hobby, but because I genuinely enjoy learning how complex systems fit together.

    For a long time I thought these were separate interests.

    Now I realize they’ve always been connected.

    They’re all about understanding systems, exploring decisions, and seeing how consequences ripple outward.

    From Security Analyst to Storyteller

    I’ve spent more than twenty-five years working in cybersecurity, beginning as a security analyst and eventually serving as Chief Information Security Officer before moving into my current role as a Security Solutions Engineer.

    One of the biggest lessons that career has taught me is that systems rarely fail because of technology alone.

    They fail because people make decisions.

    Good decisions.

    Bad decisions.

    Sometimes impossible decisions.

    Every incident tells a story.

    Every attack begins with a choice.

    Every defense depends on someone seeing the bigger picture before it’s too late.

    Once I recognized that, I started seeing the same patterns everywhere.

    History.

    Politics.

    Business.

    Tabletop games.

    The best novels.

    Different settings.

    The same human questions.

    The Worlds I’m Building

    A wide cinematic collage blending four scenes seamlessly: a futuristic city skyline glowing with digital threat overlays and cascading code; a dramatic medieval battlefield with armored knights and billowing banners in smoky dusk light; a warm candlelit tabletop RPG scene with dice, miniatures, maps and rulebooks; and a close-up of an open writer's notebook with scribbled ideas, ink, and a fountain pen. All four scenes merge together in a moody, atmospheric composite — dramatic shadows, rich colors, cinematic widescreen composition, highly detailed, sophisticated and evocative.

    That’s why ToddHDow Studios is organized around four long-term creative worlds.

    Each one represents something that has shaped my life for decades.

    Cryptogeddon

    A moody cinematic wide illustration of a near-future city at night under subtle digital attack. Glass skyscrapers reflect cascading green and blue code. Faint glowing network lines arc across the sky like constellations. Tension in the atmosphere but not chaos. Dark, high-tech, realistic, dramatic lighting, sophisticated color grading, highly detailed, widescreen composition.

    This project is rooted in the career I’ve spent decades building.

    I’ve watched cybersecurity evolve from antivirus software and firewalls into artificial intelligence, ransomware, nation-state operations, and increasingly fragile digital ecosystems that underpin nearly everything we do.

    Somewhere along the way I stopped asking, “How do we defend against this?”

    I started asking, “What happens if we don’t?”

    Cryptogeddon is where those questions become fiction.

    It’s grounded in the technology I’ve spent my career working with, but ultimately it’s a story about people trying to navigate a world that’s changing faster than they can understand it.

    Holy Wars

    A moody cinematic wide illustration of a medieval battlefield at dawn. Thick mist hangs low over the ground. Armored knights and soldiers stand in silhouette holding banners that ripple in the wind. The sky is dramatic with dark storm clouds breaking to reveal faint early light. Realistic historical tone (not fantasy-heavy). Rich textures, dramatic shadows, sophisticated cinematic color grading, widescreen composition.

    Long before cybersecurity became my profession, I studied Philosophy and Religious Studies at the University of Toronto.

    My honours thesis—The Just War Theory and the Argument for Peace—traced Christian thinking about warfare from the time of Christ to the modern era.

    That research never really left me.

    History isn’t simply a collection of dates and battles.

    It’s a study of ideas.

    Leadership.

    Faith.

    Power.

    Ethics.

    And the stories civilizations tell themselves to justify conflict.

    Holy Wars is where I’ll continue exploring those questions.

    Book of Dow

    Book of Dow

    Every family carries stories.

    Some are preserved in journals and photographs. Others survive only through fragments—old letters, fading gravestones, whispered family legends, and unanswered questions.

    Book of Dow is my attempt to explore those stories.

    Part genealogy, part historical research, and part storytelling, it’s a long-term project inspired by my family’s roots in early New England. Whether that journey ultimately becomes a work of family history, historical fiction, or something that ventures into the supernatural shadows of Salem remains to be seen.

    What matters most is the search itself.

    Because every family has a past.

    Every place has its legends.

    And sometimes the line between history and myth isn’t as clear as we’d like to believe.

    Campaign Chronicles

    A moody cinematic wide illustration of a candlelit tabletop roleplaying game scene. Dice mid-roll across a detailed battle map. Painted miniatures stand in dramatic shadow. A Dungeon Master's screen partially visible. Warm candlelight contrasts with deep shadows. Rich textures, realistic style, sophisticated cinematic color grading. IMPORTANT: true full-bleed composition, no white borders, no letterboxing, no blank canvas space at top or bottom, edge-to-edge artwork filling entire frame.

    I first rolled dice as a kid.

    Like many people, life eventually pulled me away from Dungeons & Dragons.

    Years later I found my way back, and today I enjoy the hobby even more than I did growing up.

    I play around my own table, at friends’ homes, in local game stores, and online with players from around the world.

    As a Dungeon Master I’m drawn to horror, suspense, impossible choices, and campaigns where actions have lasting consequences. Ravenloft, gothic horror, and stories where the world remembers what the players have done.

    I’m also fascinated by how AI and modern technology are transforming tabletop gaming. From worldbuilding and encounter design to handouts, artwork, and campaign management, we’re living through one of the most exciting periods the hobby has ever seen.

    Campaign Chronicles is where I’ll share that journey as both a Dungeon Master and someone building a business around helping others experience unforgettable games.

    The Writer’s Notebook

    A moody cinematic wide illustration of a writer's notebook open on a wooden desk at night. Pages filled with handwritten notes, crossed-out lines, sketches, and margin ideas. A fountain pen rests across the page. A half-empty coffee cup nearby. Warm desk lamp light illuminating the notebook while the rest of the room fades into deep shadow. Atmospheric, reflective, sophisticated tone. Highly detailed, realistic textures, dramatic lighting, widescreen composition.

    Everything eventually comes back to writing.

    This is where I’ll document the journey itself.

    The victories.

    The frustrations.

    The lessons learned.

    The books I’m reading.

    The publishing decisions.

    The creative breakthroughs.

    The moments when everything seems impossible.

    And, hopefully, the moments when it all comes together.

    Because I suspect building these worlds will be every bit as interesting as eventually finishing them.

    Looking Ahead

    ToddHDow.com isn’t becoming something entirely different.

    In many ways, it’s becoming what it was always meant to be.

    A place where my professional experience, academic background, lifelong hobbies, and creative ambitions all come together under one roof.

    Whether you’re here because of cybersecurity, speculative fiction, history, tabletop gaming, writing, or simply because you’re curious about how creative projects grow over time, I’m glad you stopped by.

    My hope is that years from now someone can visit ToddHDow.com and discover something that sparks their own curiosity.

    Maybe it’s a novel.

    Maybe it’s a D&D campaign.

    Maybe it’s a historical essay.

    Maybe it’s an article about cybersecurity or artificial intelligence.

    Different projects.

    Different audiences.

    One philosophy.

    Worlds built on strategy, conflict & consequence.

    Welcome to ToddHDow Studios.

  • AI, Supply Chains, and the Next Cyber Battlefield

    AI, Supply Chains, and the Next Cyber Battlefield

    AI, Supply Chains, and the Next Cyber Battlefield

    I regularly track developments in cybersecurity, artificial intelligence, critical infrastructure, and geopolitical competition.

    Most of these stories disappear into the daily news cycle.

    A few feel different.

    A few reveal where technology is heading, how conflict is changing, and what tomorrow’s risks might look like.

    These are the signals that have captured my attention recently.


    Signal #1: AI Is Becoming an Operational Security Tool

    The conversation around AI often focuses on productivity and automation.

    The more interesting development is operational decision-making.

    Organizations are increasingly using AI to triage alerts, investigate suspicious activity, summarize incidents, and assist analysts during security operations. At the same time, attackers are experimenting with AI-assisted reconnaissance, vulnerability discovery, and social engineering.

    The race is no longer simply human versus human.

    It is becoming machine-assisted defenders versus machine-assisted attackers.

    Why It Matters

    For the first time, cyber conflict is beginning to scale beyond purely human decision-making.

    The side that can accelerate decisions fastest may gain a significant advantage.

    Organizations that learn how to effectively combine human judgment with machine speed may find themselves far better positioned than those relying on either one alone.

    Now Picture This…

    A nation-state launches a coordinated cyber campaign against multiple critical infrastructure providers.

    Human analysts cannot keep pace with the volume of alerts.

    Both attackers and defenders rely on competing AI systems making real-time decisions.

    At first, everything appears normal.

    Then one of the defensive AI systems begins making recommendations nobody fully understands.

    The analysts face a terrible choice:

    Trust the machine—or turn it off.


    Signal #2: Supply Chains Remain the Soft Underbelly

    supply chains

    The largest organizations in the world continue to invest heavily in cybersecurity.

    Attackers increasingly look elsewhere.

    Software vendors, contractors, managed service providers, and cloud partners remain attractive targets because compromising one trusted organization can provide access to hundreds—or thousands—of others.

    The strongest front door in the world matters little if someone leaves a side entrance unlocked.

    Why It Matters

    Modern societies depend on invisible trust relationships.

    Most people never see them.

    Attackers do.

    As organizations become increasingly interconnected, the security of one company becomes dependent upon the security of many others.

    Now Picture This…

    A small software company wins a contract supporting critical government infrastructure.

    The celebration lasts exactly one day.

    Unknown to everyone involved, the company was compromised eighteen months earlier.

    The vendor was never the target.

    The contract was.

    The attackers simply waited patiently for the right door to open.


    Signal #3: Critical Infrastructure Is Becoming a Battlespace

    critical infrastructure

    Electricity, transportation, communications, water systems, healthcare, and logistics networks are increasingly viewed through a national security lens.

    Governments around the world continue investing in resilience, redundancy, and incident response capabilities.

    That investment is occurring for a reason.

    Modern economies depend on digital systems that were never originally designed to operate in a contested environment.

    Why It Matters

    The distinction between cyber attacks and real-world consequences continues to blur.

    The question is no longer whether systems can be compromised.

    The question is what happens when digital disruptions begin producing physical effects at scale.

    Now Picture This…

    A regional power outage initially appears to be an equipment failure.

    Three days later, investigators discover similar incidents occurred across multiple jurisdictions over the previous six months.

    Each event was small.

    Each event was explainable.

    Each event was ignored.

    Viewed together, however, a disturbing pattern emerges:

    Someone isn’t attacking.

    Someone is rehearsing.


    What’s On My Radar

    • AI-enabled cyber operations
    • Critical infrastructure resilience
    • The expansion of cyber competition between major powers

    Most cybersecurity headlines focus on individual incidents.

    The larger story is the gradual normalization of cyber conflict as a persistent element of modern competition.

    For thriller writers, strategists, and anyone interested in the future, that may be the most important signal of all.

  • Worth reading this week – Cyberstalking, Leaks, Pi, startups, Libra, Internet trends

    Worth reading this week – Cyberstalking, Leaks, Pi, startups, Libra, Internet trends

    Quote I’ve been pondering:

    “A mind all logic is like a knife all blade. It makes the hand bleed that uses it.” – Rabindranath Tagore

    And this one came into my inbox last minute and had to include it this week as well:

    “I will have to remember ‘I am here today to cross the swamp, not to fight all the alligators.’”
    — From The Art of Possibility by Rosamund and Benjamin Zander

    He Cyberstalked Teen Girls for Years—Then They Fought Back – excellent reporting (as always) from Wired on the dangers of cyber stalking and the dangers that teens face in the never ending attempts by creeps to extort over nude selfies. Kids shouldn’t have to feel this way:

    “Any type of security thing can happen,” she said. “They can hack anything.” Her shoulders slouched, and she directed her voice to the table where we were sitting. “I just never envisioned that, and it’s just … We shouldn’t have to live in a world where we don’t know if people are real or not.” She folded her arms around herself and bit her lip to stop herself from crying.

    Parents need to be better informed about this and they need to equip their kids to be safe online.

    Oops: Personal data of 2.7 million people leaked from Desjardins (more coverage). A rogue employee took the data with him/her. This is difficult to prevent. As an infosec pro, I know firsthand just how difficult it is to find a balance between security and business productivity. In many cases, companies err on the side of convenience and ease of access to data. Unfortunately, we continue to see the results of not locking down data sufficiently. That said, there is lots that can be done.

    AttunityOops – part 2: TD Bank internal files found online in ‘keys-to-the-kingdom’ cloud data exposure (more from ZDNet) This one is simply shameful: “Attunity, a company that manages and safeguards data, left internal files exposed on the internet for clients including Ford and TD“. “Exposed data includes passwords and private keys for production systems, employee details, sales information.” “A company that manages and safeguards data”? Wow. It’s one thing for a non-security company to bungle access to their data, but it is quite another when a company who specializes in safeguarding data does it. I suspect Attunity sales / technical reps are fielding calls from their major clients today to discuss the status of their data and their contract renewals.

    RPi-Logo-SCREENNew Raspberry Pi 4: I love these tiny computers (buy now!). My only problem is that I don’t have much time to tinker anymore. Probably a good thing or I’d have a whole army of them around the house. HackerNews doesn’t disappoint with a crowdsourced list of plenty of interesting (or not) things to do with a Pi.

     

    Wanna do a start up? I’ve tinkered with starting my own business for years, but find it difficult to make the leap when I have been fortunate enough to have an interesting career working for other people. That said, I’ll always be a dreamer. My latest trigger article: Startup idea checklist. Such a good sanity check on building a business. And, some motivational reading as well: How I bootstrapped my side project into a $20k/mo lifestyle business (and my new indie business motivation website)

    companyofoneSpeaking of startups, I stumbled across this book online: Company of One: Why Staying Small Is the Next Big Thing for Business by Paul Jarvis . It looks similar to The Million-Dollar, One-Person Business: Make Great Money. Work the Way You Like. Have the Life You Want by Elaine Pofeldt, which I loved. Tons of great tips and motivation on building a sustainable, profitable one person business. We are all experts at something and we’ve all got something to sell. I haven’t purchased Company of One yet, as my backlog of books to read is huge, but I suspect I’ll pick up a copy soon to motivate me while distracting me from actually doing the work of building my own side hustle.

    I missed last week’s post, but had this queued to go out, so I’ll still keep this in this week’s post: The big news last week: Libra – a Facebook-led digital crypto-currency. Plenty of press on this one. The best quick summary I’ve read thus far is by the entertaining writers at The Hustle. Hard to say how well adoption will go – government oversight (boosted by financial industry lobbyists, no doubt) could yet hobble it. But, if they make it easy (embedded in existing systems like Facebook and the gang), secure and stable (the lack of a financial bubble a la bitcoin), then I suspect it’ll take off.

    Key findings from the Internet Trends report (as reported in The Idea’s June 17 email):

    Mary Meeker released her latest annual Internet Trends report at Recode’s Code Conference. Below are some of the findings most pertinent to the news media industry:

    • 15% of all retail sales are now though e-commerce. E-commerce is growing at 12.4%, and regular retail is growing at just 2%. (Ed note: look out for how publishers continue to capitalize on this growing industry through affiliate links.)
    • Digital ad spending grew 22% in 2018
    • Google and Facebook still dominate the digital ad market, but Amazon and Twitter are growing
    • 62% of all digital display ad buying is of programmatic ads, and that number is growing
    • Customer acquisition costs are increasing, sometimes exceeding customers’ lifetime values for digital subscription companies. Meeker suggests that free trials can be a cost effective way to alleviate that cost.
    • Time spent with digital media is still going up. Americans in 2018 spent 6.3 hours a day, 7% higher than the year before. More than 25% of U.S. adults are “almost constantly online.”

    Note: the above stats were all taken from Atlantic Media’s The Idea June 17 email – I don’t want to claim any credit for the summary presented above! If you are interested in the media industry, I highly recommend subscribing to their mailing list.

    I think that’s it for this week. For my Canuck readers, enjoy the long weekend!

    Todd