About
Talented, experienced and driven software engineer and leader with over 20 years of…
Activity
968 followers
-
Sam Peretz reposted thisSam Peretz reposted thisWhether you’ve noticed it or not, with regulations like NIS2, Europe’s regulators have quietly redrawn the cybersecurity poverty line. It’s no longer about just having the right tools; it’s about who can line them up with strategy and wield them correctly. And with corporate accountability now firmly in the picture, if your suppliers aren’t up to scratch, you don’t just inherit the breach, but the regulatory exposure and the fines too. But we can’t just magic up cybersecurity strategy and governance leaders to pull struggling organisations up to scratch - so, how can we spark a rising tide to lift all ships? In my latest article, I’ve explored this evolution of the cybersecurity poverty line, delving into the CISO shortage (only 1 in 10,000 organisations have one!), and have shared how at Sophos, we’re helping close this strategy gap.No One Is Above the Line: How NIS2 and DORA Made the Cybersecurity Poverty Line Everyone's ProblemNo One Is Above the Line: How NIS2 and DORA Made the Cybersecurity Poverty Line Everyone's Problem
-
Sam Peretz reposted thisSam Peretz reposted thisSee you at #RSAC 2026? 👋 The countdown to RSAC is on, and we’re excited to connect on what it really means to build trust in cybersecurity — alongside all things threat intelligence, CISO Advantage, and how AI is changing security teams. Join our CEO Joe Levy on March 23 at 8:30am PDT for the panel '“Hack back” is a scaling distraction: scaling active cyber defense', alongside Sumon D., and Sezaneh Seymour. Learn more: https://bit.ly/4au8LeQ
-
Sam Peretz shared thisWelcome to Sophos Workspace Protection https://lnkd.in/ebYrYJKqSam Peretz shared thisOne prompt shouldn’t put your proprietary data at risk. 🛡️ Employees are moving faster with GenAI—but everyday requests like “summarize this file” can unintentionally share sensitive data. Sophos Workspace Protection helps you define and enforce clear boundaries, with governance and practical guardrails for how data is accessed and shared in the browser. As the front door to your apps and data, the browser must keep productivity high and exposure low, right where the work happens. Learn more via link in comments 👇
-
Sam Peretz reposted thisSam Peretz reposted thisAttack timelines are compressing and it’s changing what “good” defense looks like. The Sophos X-Ops 2026 Active Adversary Report is here, built on insights from 600+ real-world Sophos Incident Response and MDR cases over the past year. 👤 67% of incidents were rooted in identity-based attacks 🕐 88% of ransomware hits happened outside business hours 📤 79% of data exfiltration happened out of hours Adversaries aren’t reinventing the playbook — they’re exploiting compromised credentials, weak or absent MFA, and poorly secured identity systems, and using timing to their advantage. Learn more via link in comments 👇
-
Sam Peretz shared thisSophos achieves its best-ever results in the MITRE ATT&CK Enterprise 2025 EvaluationSophos achieves its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation
-
Sam Peretz shared thisLocking it down: A new technique to prevent LLM jailbreaksLocking it down: A new technique to prevent LLM jailbreaks
-
Sam Peretz reposted thisSam Peretz reposted this📣 Today we launched Sophos Identity Threat Detection and Response (ITDR)! Sophos ITDR helps stop identity-based attacks before they happen — continuously monitoring your environment for identity risks, misconfigurations, and compromised credentials found on the dark web. With faster detection, smarter response, and insights into risky user behavior, Sophos ITDR helps organizations strengthen their defenses. Learn more: https://lnkd.in/ebBipPcN
-
Sam Peretz reposted thisSam Peretz reposted this🎉 We are proud to share that Sophos has been named a Leader in the 2025 Frost Radar™️ for Managed Detection and Response. @[Frost & Sullivan](urn:li:organization:4506) placed us in the top right and recognized our open-platform {hashtag|\#|MDR} model, unlimited expert-led incident response, and continued innovation. This includes our acquisition of Secureworks, which they described as “one of the most important mergers in the history of MDR,” along with enhanced internal asset visibility and AI-powered threat operations. We’re honored by this recognition and remain committed to helping our customers stay ahead of threats. Learn more ➡️ https://lnkd.in/e_9yKxqY
Sam Peretz commented on a post
1y
My wife and I have been vegan for over 5 years now. We've tried all the fake meat categories. We'll occasionally have a Beyond or Impossible burger at a restaurant, because sometimes it's the only vegan option that isn't just iceberg lettuce and 1/8 of a tomato (which is what many restaurants serve as "salad"). At home, though, we never, ever buy those. We stick to Gardein and other soy-based or otherwise plant-based products when we want something meat-like (e.g., tacos or chili). Haven't tried Abbot, but sounds similar to Gardein.
-
Sam Peretz liked thisSam Peretz liked thisAI is already inside your organization. Some of it arrived through approved tools. The rest came in through browser tabs, integrations, and agents your security team never reviewed. "Even if frontier AI development stopped today, that work would remain." John Peterson, CTO, Sophos The forecasts will keep shifting. What decides the outcome is whether your organization can adapt safely as the technology, the threat landscape, and the way people work keep changing. So AI uncertainty is a reason to build: organizations that can experiment, govern risk in proportion to its impact, and keep control even when the next development is impossible to predict. Read the full piece on what risk-based governance and full visibility look like in practice: https://lnkd.in/ei_x6m43
-
Sam Peretz reacted on thisSam Peretz reacted on thisToday’s security defences are built for human timelines, for attacks that could take weeks to carry out. But the reality is that with the help of AI agents, adversaries have already compressed that timeline down from weeks to days. Despite this shift to machine-speed attacks, most defences are still set up and built for those old timelines, slowed down by the manual collation of information across dozens of siloed tools. Compare this to the AI-assisted processes of adversaries, and it becomes clear they have the upper hand in this scenario. That’s not to say that the defences being deployed aren’t excellent, just that to fight these new AI-assisted adversaries, we need to break down those siloes. Instead of tech stacks, we need unified cybersecurity defence systems to speed up those processes and get back on level pegging with adversaries. Which is why Sophos put this theory to the test, using our own operations to prove it and to develop our own offering in Sophos Fusion, the industry’s first AI-native cybersecurity defence system. In my latest article, I explore how the compression of attacks sparked our own experimentation at Sophos to make cyber defence systems a reality. Check it out below.In the era of AI-native adversaries, we need to send old security stacks packing.In the era of AI-native adversaries, we need to send old security stacks packing.
-
Sam Peretz reacted on thisSam Peretz reacted on thisYesterday’s LinCY event was a great reminder that some of the best leadership lessons come from bringing together people with different experiences but a shared mission. I enjoyed the opportunity to engage with leaders from across government and industry on the challenges of strategy, decision-making, collaboration and the shared mission of cyber defense. The conversations reinforced that effective leadership is often less about having the right answers and more about asking the right questions, empowering team members, listening to diverse perspectives, and building trust. Thank you to Brett Leatherman, Alexandra R., Joe Levy and everyone involved in the Leadership in Cyber (LinCY) program for a thoughtful and engaging discussion. I learned a lot and appreciated the opportunity to participate.
-
Sam Peretz liked thisSam Peretz liked thisWhether you’ve noticed it or not, with regulations like NIS2, Europe’s regulators have quietly redrawn the cybersecurity poverty line. It’s no longer about just having the right tools; it’s about who can line them up with strategy and wield them correctly. And with corporate accountability now firmly in the picture, if your suppliers aren’t up to scratch, you don’t just inherit the breach, but the regulatory exposure and the fines too. But we can’t just magic up cybersecurity strategy and governance leaders to pull struggling organisations up to scratch - so, how can we spark a rising tide to lift all ships? In my latest article, I’ve explored this evolution of the cybersecurity poverty line, delving into the CISO shortage (only 1 in 10,000 organisations have one!), and have shared how at Sophos, we’re helping close this strategy gap.No One Is Above the Line: How NIS2 and DORA Made the Cybersecurity Poverty Line Everyone's ProblemNo One Is Above the Line: How NIS2 and DORA Made the Cybersecurity Poverty Line Everyone's Problem
-
Sam Peretz reacted on thisSam Peretz reacted on thisBeware of this new breed of cynics. AI sucks. Rich people suck. America sucks. Everything sucks. And here’s a never ending stream of dunks from the sidelines. Solutions? No. Who would be so bold as to think they could, imperfectly, try to help? Only the most evil do good because it’s all a power play for the future. Fuck all of that. There are plenty of grifters. And plenty of people who think they’re doing good but aren’t. But there are also people out here genuinely trying to make the world better. No, they weren’t elected, but at least they’re fucking doing something. At least they’re making something. At least they’re trying. Beware the articulate but passive, screaming from the bleachers about the morality of people in the arena. The world is chaos. This moment is chaos. There is no perfect and orderly way to help without swinging wildly and opening yourself to criticism. Criticism is fine. It can be useful. And it can be healthy if it’s tactical and actionable. That’s all fine. But watch out for those who make negativity and critique the core of their identity and brand while offering no alternative. If only the bad guys fight, only the bad guys can win. We need to stop mistaking cynicism for courage. It’s much closer to the opposite.
-
Sam Peretz reacted on thisSam Peretz reacted on thisAt Sophos, we exist to erase the cybersecurity poverty line. While I’ve been talking about this mission for years, I decided it’s about time I wrote down what we mean when we refer to the “cybersecurity poverty line,” it’s origin, what’s caused it, and why now is our greatest opportunity to erase it. Those of us in cybersecurity operate in service of the customers we protect by deterring and taking down adversaries. No defense is perfect, so we make it very expensive for them to penetrate systems. Ask most people in the industry, and the consensus is that we’re not winning that battle, yet. Nor will we, if we continue to view the cybersecurity poverty line as inevitable, rather than what it really is: a consequence of our own making, after 40 years of treating cybersecurity as a technology problem, not an economic one. The cybersecurity poverty line (coined by the great Wendy Nather, who I joined in conversation with Cyber Threat Alliance on this topic 2 years ago) is a strategic capability gap. It can be defined as the line below which an organization cannot be effectively secured because of tradeoffs made within constraints like expertise, capability, money, and/or influence. Many people mistake the line as a reflection of company size or financial resources, but that’s too narrow a view. There are global enterprises below the line whose technical debt and operating risk grows faster than their ability to manage it, often as a consequence of their commercial success. Some underinvest in strategy, causing struggles in discerning which partner to work with, which products and services are best-fit to their needs, how to communicate risk to their board, or how to secure approvals for appropriate budget and resources. Conversely, we work with regional manufacturers and education institutions, etc. who operate above the line because of a deliberate, disciplined approach to their security program with measurable risk reduction aligned to their business, despite the size of their team or budget. Opportunity and risk go hand-in-hand, and technological leaps always bring us to crossroads. AI and agentic risk is top-of-mind for everyone, but we’ve also never had a better opportunity than now to meaningfully erase the line. What we choose to do at this crossroad will define this industry for years to come. Sophos has some exciting news on the horizon, rooted in our identity and our work to build a system that changes the economics of cybersecurity for good. More soon. [In comments: link to blog and youtube video]
-
Sam Peretz reacted on thisSam Peretz reacted on thisThe hardest problems in cybersecurity have never been solved by any one company alone. That is why Sophos is proud to be part of OpenAI's new Daybreak Cyber Partner Program, building on our existing work with them as a Trusted Access for Cyber (TAC) member. This program is the next step in putting frontier AI to work for defense, from using GPT-5.5 with TAC inside our own environment, to embedding the model in the products and services our customers already use, without putting the burden of model operationalization on them. The goal here isn't just frontier AI and harnesses helping find more exposures and vulnerabilities faster; that's necessary, but not sufficient. It’s the other half of the equation: practically managing them at a speed and scale that defenders have not previously been able to achieve. That perhaps matters most for the organizations the industry tends to overlook. The mid-sized manufacturer, the regional hospital, the local school district, the small financial advisor that doesn’t have the expertise or capabilities to stay ahead of the evolving threat and AI landscape. Sophos’ leadership in defending across segments, in non-exclusionary fashion, has always been our priority and differentiator. Delivering on these use cases with OpenAI through tools that Enterprise-to-SMB customers trust is the best way to strengthen resilience and advance risk-management maturity. We have some very exciting innovations on the near-term horizon. My thanks to the OpenAI team, and to everyone at Sophos working to make sure the advantage stays with the defenders.
-
Sam Peretz reacted on thisSam Peretz reacted on thisAgent loops good, but agent loops expensive. Make AI and loops use less token with caveman skill. "Brain still big, mouth small." Brilliant Julius Brussee! https://lnkd.in/gRCDyfvN
Experience & Education
Licenses & Certifications
Patents
-
Method and system for mass production of variable shaped products
Issued US 8,783,553
A computerized system, method, and computer-readable media implementing a method for mass producing variable shaped printed products is presented. A set of cutlines defining a shape for the ordered item is associated with each ordered item. A ganging system selects a plurality of ordered items to be simultaneously produced. Individual cutter-ready outline files corresponding to the associated set of outlines for each of the items selected for production are rendered and inserted into a gang…
A computerized system, method, and computer-readable media implementing a method for mass producing variable shaped printed products is presented. A set of cutlines defining a shape for the ordered item is associated with each ordered item. A ganging system selects a plurality of ordered items to be simultaneously produced. Individual cutter-ready outline files corresponding to the associated set of outlines for each of the items selected for production are rendered and inserted into a gang template to generate an aggregated cutlines gang file. The gang file and at least one sheet of substrate are submitted to a cutting system. The cutting system cuts the individual finished products from the substrate sheet(s).
Other inventorsSee patent -
Method and system for calculating weight of variable shape product manufactured from product blank
Issued US 8,238,643
A computerized system, method, and computer-readable media implementing a method for determining a weight of a product, and optionally its shipping weight and postage are described. A product having a variable shape in two dimensions wherein the shape is defined in the two dimensions by a set of cutlines is manufactured from a product blank of known weight. The weight of the product is determined from the number of pixels in a scaled image of the cutlines, the image having the same aspect ratio…
A computerized system, method, and computer-readable media implementing a method for determining a weight of a product, and optionally its shipping weight and postage are described. A product having a variable shape in two dimensions wherein the shape is defined in the two dimensions by a set of cutlines is manufactured from a product blank of known weight. The weight of the product is determined from the number of pixels in a scaled image of the cutlines, the image having the same aspect ratio as the product blank. The weight of the product blank and the ratio of the pixels corresponding to product surface area relative to the total number of pixels in the image are used to calculated the actual weight of the product.
Other inventorsSee patent
Projects
-
Keychains
-
Managed product launch, including greenfield product conceptualization, business analysis including capacity analysis for manufacturing and supply chain, manufacturing capability development, software development, content development, creative delivery, etc.
Other creatorsSee project
Recommendations received
5 people have recommended Sam
Join now to viewOther similar profiles
Explore more posts
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content