Publications

The record

The public paper trail, ordered by what each kind of entry actually proves. Research others built on comes first; being quoted comes after it. Counts are of distinct articles, and the outlet count is given alongside because they are not the same number. Syndication and reprints are not listed — the same Log4j commentary carried in four languages is reach, not four interviews, and counting it that way would make the rest of this page worth less.

Cited in

Independent work that relies on the research and says where it came from. 2 publications, both citing the same Emotet analysis.

The Hybrid Threat Imperative: Deterring Russia Before It Is Too Late CEPA · Dec 2025 Cites Emotet Re-emerges with Help from TrickBot at footnote 89, supporting the passage on the operations that disrupted Emotet, TrickBot and GameOver Zeus. Report by Ambassador Eitvydas Bajarūnas, non-resident senior fellow at the Center for European Policy Analysis. Managing Cyber Black Swans: Can potentially crippling cyber situations be foreseen, allayed, and turned into growth opportunities? Int’l Journal on Advances in Security · 2023 Anne Coull and Elena Sitnikova, vol. 16 nos. 1–2, pp. 23–32. The Emotet article is reference [42] at printed page 31, and is relied on in the body where the paper describes TrickBot delivering the payload and evading Microsoft’s controls.

Quoted as a source

Reporters who came looking for the analysis. 12 articles across 9 outlets — several cover the same vulnerability, which is why both figures are here.

Iranian Threat Activity & US Government Response Dark Reading Google Emergency Patches for Chrome Zero-Day SC Magazine OAuth Token Vulnerabilities in Social Sign-In The Record Chinese Hacking Groups Target US & European Governments SiliconANGLE Don't Forget About Log4J VentureBeat ServiceNow Misconfiguration: Cause for Concern SC Magazine LockBit & ALPHV Ransomware Gang Leak Sites Dark Reading Cybersecurity Analyst Degree: What You Need to Know Dice China’s APT41 Exploited Log4j Within Hours Computer Weekly OAuth Implementation Flaw Could Lead to Account Takeover Security Boulevard Google Reveals ‘Reptar’ Vulnerability Threatening Intel Processors Hackread CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library Hackread

Published research

5 entries: three under his own byline at Qualys, and two reports he is credited in as a contributor rather than an author.

Emotet Re-emerges with Help from TrickBot Qualys · Byline The article both citations above point at. Its URL and the citations date it to 6 January 2022; the live page currently displays 21 December 2022. The discrepancy is the publisher’s, and is noted here so a reader checking the footnote does not conclude they have the wrong article. Ransomware: Ranzy Locker Qualys · Byline Risk Fact #3: External-Facing Vulnerabilities and Cloud Security Qualys · Byline 2023 TruRisk Threat Research Report Qualys · Contributor Named in the contributors list as Lead Threat Intelligence Analyst. A contributor credit on a team report, not sole authorship of its findings. The report itself sits behind a download form. 2022’s Top Routinely Exploited Cyber Vulnerabilities Qualys · Contributor Listed in the additional contributor credits rather than the main byline.

Essays and frameworks

Self-published. 5 pieces — these establish what he argues, not that anyone asked.

The Optionality Problem: A Capital Governance Test of Amazon’s RTO LinkedIn Your Return-to-Office Mandate Is Devaluing Your Company LinkedIn A Quantitative Framework for Holistic Cybersecurity Risk LinkedIn The Underbelly of EDR/XDR: What Vendors Don’t Tell You LinkedIn The Enduring Challenge of Speculative Execution LinkedIn