Advisory BoardStrategic Security Advisor

Joshua Copeland

Strategic Security Advisor

Cybersecurity Executive, Professor, Author, and Military Cyber Leader

Joshua Copeland is a cybersecurity executive with more than 25 years of experience spanning enterprise security, military service, higher education, and public-sector cyber defense. He serves as a cybersecurity director, professor of cybersecurity, and deputy commander of a state cyber reserve force. Joshua is the author of Unpopular Opinion and a frequent keynote speaker, media contributor, and podcast host known for challenging conventional thinking on cybersecurity leadership, governance, and organizational resilience. His work focuses on translating technical capability into timely, coordinated, and mission-driven action.

Connect on LinkedIn Subscribe to the Newsletter

From Decryption Digest

View all →

HOW-TO GUIDEOctober 8, 202610 min

DNS Security Best Practices for Enterprise Environments

DNS is involved in 91% of malware attacks and is the primary communication channel for C2 beaconing, DNS tunneling exfiltration, and domain generation algorithm (DGA) campaigns. This guide covers the DNS security controls that close those attack channels and the telemetry that makes DNS a high-value detection source.

HOW-TO GUIDEOctober 1, 202610 min

How to Detect and Prevent Business Email Compromise

BEC cost organizations $2.9 billion in reported losses in 2023, and most of those losses happened despite email security gateways being deployed. Gateway-based controls catch malware and phishing links. BEC attacks typically contain neither. This guide covers the detection and prevention controls specific to BEC.

HOW-TO GUIDESeptember 24, 202611 min

How to Implement DevSecOps: A Practitioner's Guide

Most DevSecOps implementations fail not because of tooling gaps but because security gates are added to pipelines without developer buy-in, blocking deploys on false positives and creating adversarial relationships between security and engineering. This guide covers the integration pattern that produces security coverage developers do not route around.

HOW-TO GUIDESeptember 24, 202612 min

How to Respond to a Zero-Day Vulnerability Affecting Your Organization

When a zero-day is announced with active exploitation in the wild, the next 72 hours determine whether your organization is a victim or a defender. This guide provides the response workflow that reduces exposure during the window between disclosure and patching.

HOW-TO GUIDESeptember 17, 202611 min

Kubernetes Security Best Practices for Production Environments

Kubernetes provides powerful security primitives, RBAC, network policies, pod security admission, secrets encryption, that most clusters do not have configured correctly. This guide covers the specific configurations that close the most common Kubernetes attack paths.

HOW-TO GUIDESeptember 17, 202610 min

How to Build a Vulnerability Disclosure Program or Bug Bounty

A vulnerability disclosure program is no longer optional for organizations with an internet-facing attack surface, it is how researchers tell you about your vulnerabilities before attackers exploit them. This guide covers how to structure a VDP or bug bounty that researchers actually use and security teams can operationalize.

Get threat intelligence in your inbox

Join 50,000+ security professionals reading Decryption Digest, free, every morning.

Subscribe Free

Joshua Copeland

From Decryption Digest

DNS Security Best Practices for Enterprise Environments

How to Detect and Prevent Business Email Compromise

How to Implement DevSecOps: A Practitioner's Guide

How to Respond to a Zero-Day Vulnerability Affecting Your Organization

Kubernetes Security Best Practices for Production Environments

How to Build a Vulnerability Disclosure Program or Bug Bounty

Explore Decryption Digest

All Briefings

Upgrade to the Paid Portal

About Decryption Digest

Get threat intelligence in your inbox