About From Red to Blue

I'm Michael Garcia. I lead cybersecurity at Specialized, a global company, where I'm maturing the security program and helping the business adopt AI safely without slowing it down.

I spent 13 years at the CIA in cyber and offensive operations, then worked in offensive security at Amazon. That work taught me how attackers actually choose targets, where they get in, and what they go after once they're inside. Now I sit on the other side of the table, and I still use that view to set priorities: where would I get in, what would I go after, and what would actually stop me?

This site is where I write about that. Expect posts on where attackers are headed next, especially AI agents and assistants, plus identity, exposure, and how to explain security risk in terms executives and boards can act on.

The views here are my own and don't represent my employer.