About
I’m a 𝗴𝗿𝗼𝘄𝘁𝗵-𝗳𝗼𝗰𝘂𝘀𝗲𝗱 𝗖𝗙𝗢 dedicated to building scalable tech and SaaS…
Articles by Patrick
-
Driving Cloud Success: Aligning DISC Leadership Skills with the AWS Cloud Adoption Framework
Driving Cloud Success: Aligning DISC Leadership Skills with the AWS Cloud Adoption Framework
Cloud adoption is no longer a question of "if" but "how." To maximize business outcomes and achieve a rapid time to…
-
AI-Powered Growth: Aligning AI Applications with Your SMB's Stage of Development
AI-Powered Growth: Aligning AI Applications with Your SMB's Stage of Development
A strategic guide for fintech leaders In today's rapidly evolving technological landscape, artificial intelligence (AI)…
2 Comments -
6 Ways Financial Professionals Like You Can Dominate the Market in the Next 3 Years
6 Ways Financial Professionals Like You Can Dominate the Market in the Next 3 Years
Leveraging Generative AI, Cloud Technologies, and a Consulting Partner In today's rapidly evolving financial services…
2 Comments
Activity
31K followers
-
Patrick Tan shared thisOne in three organizations runs five or more insider risk tools. Two in three still say detection accuracy is their biggest problem. More tools didn’t buy more clarity. They bought more noise. If your 2027 budgets are about to lock, read this first: https://lnkd.in/dj-hX9tM #CISO #SecurityLeadership #InsiderRisk
-
Patrick Tan shared thisEvery healthcare SOC is making the same quiet trade-off: Which logs can we afford to keep? Aura, a company whose entire business is protecting people’s identity data, faced the same math. After switching SIEMs, they brought 12 data sources under one view and cut SIEM costs by roughly 30 to 40%. Coverage should be a security decision, not a billing one. Read how Aura did it: https://lnkd.in/g3jgSVA6 #CISO #HealthcareIT #LifeSciences #SecOps
-
Patrick Tan shared thisThe biggest threat inside your company isn’t a spy. It’s a well-meaning employee on a deadline. 74% of organizations now rank negligent insiders as their top concern. Malicious actors? 59%. Your controls were built for villains. Your incidents are coming from everyone else. https://lnkd.in/dj-hX9tM #CISO #InsiderThreat #RiskManagement
-
Patrick Tan reposted thisPatrick Tan reposted thisA Single HTTP Request Could Turn a PHP Vulnerability Into an Enterprise Security Crisis. Two critical PHP core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known collectively as PHP2Shell, expose a serious risk: unauthenticated attackers may be able to execute arbitrary code on vulnerable systems through crafted HTTP requests. The danger lies in where the vulnerabilities occur. Exploitation may happen before application-level code or authentication checks run, potentially bypassing security assumptions that enterprises rely on to protect their web applications. For large enterprises, the consequences could extend far beyond a single vulnerable server. Compromised web applications can become potential entry points for unauthorized access, sensitive data exposure, operational disruption, and further attacks against connected systems. The exposure is particularly concerning because PHP powers widely deployed web platforms and applications, including WordPress, Drupal, Magento, and Laravel. Organizations with extensive application portfolios may struggle to identify every vulnerable deployment, particularly across legacy systems, cloud workloads, and internet-facing infrastructure. The reported exploitation activity makes this more than a theoretical security concern. Attackers can move quickly from vulnerability disclosure to automated scanning and exploitation attempts, leaving organizations with limited time to assess their exposure and respond. For CISOs and enterprise security leaders, PHP2Shell underscores a fundamental security challenge: a vulnerability in a core technology can undermine the protections built around the application. Read the full technical analysis of CVE-2026-109618 and CVE-2026-109619, including affected systems, indicators of compromise, and detection queries: https://lnkd.in/eUGA85eY #Cybersecurity #EnterpriseSecurity #CISO #ThreatIntelligence #RemoteCodeExecution #VulnerabilityManagement #ThreatDetection #IncidentResponse
-
Patrick Tan shared thisYou onboarded hundreds of new workers this year. None of them had a background check. None of them took security training. All of them have credentials. They’re AI agents. 94% of organizations say AI is increasing their insider risk exposure. So who’s watching them? Let's find out: https://lnkd.in/dj-hX9tM #CISO #AIsecurity #InsiderRisk
-
Patrick Tan shared this“Our previous SIEM felt more like a checkbox than a functional security tool.” That’s Shawn Chakravarty, SOC Director at Upwork. Critical alerts sometimes arrived days late. His analysts worked around the SIEM instead of in it. In financial services, a SIEM that satisfies the examiner but not the analyst is a risk you pay for twice. Today, 100% of his analysts start their day in Gurucul. Here’s how: https://lnkd.in/gPjkNSzw #CISO #FinancialServices #SecOps #SIEM
-
Patrick Tan reposted thisPatrick Tan reposted this𝗔𝗜 𝗮𝗱𝗼𝗽𝘁𝗶𝗼𝗻 𝗶𝘀 𝗺𝗼𝘃𝗶𝗻𝗴 𝗳𝗮𝘀𝘁, and agents, copilots and automated workflows are now interacting with your people, data and systems every single day. ⠀ An inventory is a useful first step for knowing what AI exists in your environment, and the harder questions come right after that: 𝘄𝗵𝗼 𝗶𝘀 𝗰𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝗿𝗶𝘀𝗸, 𝘄𝗵𝗶𝗰𝗵 𝗶𝗱𝗲𝗻𝘁𝗶𝘁𝗶𝗲𝘀 𝗮𝗻𝗱 𝗱𝗮𝘁𝗮 𝗮𝗿𝗲 𝗶𝗻𝘃𝗼𝗹𝘃𝗲𝗱, 𝗮𝗻𝗱 𝗵𝗼𝘄 𝘁𝗵𝗮𝘁 𝗿𝗶𝘀𝗸 𝗶𝘀 𝗰𝗵𝗮𝗻𝗴𝗶𝗻𝗴 𝗼𝘃𝗲𝗿 𝘁𝗶𝗺𝗲. ⠀ The team just put together this walkthrough and I wanted to share it with all of you. In about two minutes it shows how 𝗚𝘂𝗿𝘂𝗰𝘂𝗹 𝗔𝗜 𝗥𝗶𝘀𝗸 𝗮𝗻𝗱 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗲: ⠀ • Brings activity across AI applications, agents, models and tools into 𝗼𝗻𝗲 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘃𝗶𝗲𝘄, connected to the human and non-human identities, access and data involved ⠀ • Reveals 𝘀𝗮𝗻𝗰𝘁𝗶𝗼𝗻𝗲𝗱 𝗮𝗻𝗱 𝘂𝗻𝘀𝗮𝗻𝗰𝘁𝗶𝗼𝗻𝗲𝗱 𝗔𝗜 𝗮𝗰𝘁𝗶𝘃𝗶𝘁𝘆 (personal accounts, unmanaged agents, unapproved tools) using the telemetry you already collect ⠀ • Scores behavior change with 𝗨𝗻𝗶𝗳𝗶𝗲𝗱 𝗘𝗻𝘁𝗶𝘁𝘆 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲: behavioral AI plus hundreds of out-of-the-box detections across five families, mapped to 𝗠𝗜𝗧𝗥𝗘 𝗔𝗧𝗟𝗔𝗦 and the 𝗢𝗪𝗔𝗦𝗣 𝗧𝗼𝗽 𝟭𝟬 𝗳𝗼𝗿 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 ⠀ • Lets analysts follow the evidence in 𝗼𝗻𝗲 𝗶𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻 𝘄𝗼𝗿𝗸𝘀𝗽𝗮𝗰𝗲 and approve response through connected controls, whether that means restricting access, isolating an endpoint or opening a case ⠀ The goal is to 𝘀𝗲𝗲 𝗿𝗶𝘀𝗸𝘆 𝗔𝗜 𝗯𝗲𝗵𝗮𝘃𝗶𝗼𝗿 𝗮𝘀 𝗶𝘁 𝗱𝗲𝘃𝗲𝗹𝗼𝗽𝘀 so your team can step in and stop it well before it has a chance to escalate. ⠀ Special offer for my linkers - get a FREE 𝗔𝗜 𝗥𝗶𝘀𝗸 𝗗𝗶𝘀𝗰𝗼𝘃𝗲𝗿𝘆 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁: https://lnkd.in/gVCUVktK ⠀ #AISecurity #InsiderRisk #AIDR #SecOps #Gurucul
-
Patrick Tan shared thisYour board asks: “Could an insider incident cost us $1M?” The honest answer: you’ve probably already had one. 90% of organizations had at least one insider incident last year. A quarter of incidents topped $1M. 11% passed $2M. Insider risk isn’t a tail event anymore. It’s a line item. 725 security leaders. No spin. Read the 2026 Insider Risk Report: https://lnkd.in/dj-hX9tM #CISO #InsiderRisk #CyberRisk
-
Patrick Tan shared thisBoards are starting to ask a new question: What is our AI exposure? Most leadership teams cant answer it with evidence. And if you cant measure it, you cant govern it, insure it, or defend it to an auditor. Heres the uncomfortable truth. AI tools, coding assistants, browser extensions, and autonomous agents are already running across your organization. Some are sanctioned. Many arent. Directors carry oversight responsibility for that risk whether management has inventoried it or not. Gurucul's free AI Risk Discovery Assessment gives you the facts to bring to your next board meeting: ✅ An inventory of the AI tools and agents actually active in your environment ✅ Attribution to the users, departments, and non-human identities behind them ✅ Ranked findings on policy-restricted, unusual, or unowned activity ✅ An executive summary and clear next steps for leadership It runs on telemetry your security team already collects. No new agents, no new integrations, and typically less than an hour of your teams time, with findings reviewed the same week. Good governance starts with visibility. Walk into the boardroom with answers, not assumptions. Request yours: https://lnkd.in/gM28MKFt #BoardGovernance #CFO #AIRisk #AIGovernance #Cybersecurity
Patrick Tan commented on a post
1w
Congratulations! 🎉
Patrick Tan commented on a post
6mo
Your data tells a striking story, and it tracks with what I see every day. When a team of four can now ship in three weeks what once required eight people and three months, the pace of professional growth has never moved faster.
What I'd add for professionals navigating this moment: the challenge isn't just keeping up with new tools. It's recognizing that every person on your team is moving through this transformation at a different speed. Some are sprinting and need more tools to scale their impact. Others need more coaching and a manager who sees them, not just their output.
The companies thriving right now, like the ones on your Top Companies list, are the ones investing in both. More capability for those ready to accelerate, more support for those still finding their footing. Adaptability, as Dorie Clark says, may be the single most important thing. But it doesn't happen at the same pace for everyone.
-
Patrick Tan liked thisPatrick Tan liked thisI am hiring a GRC Analyst to support our audit, compliance, privacy, and data needs. This person should understand HIPAA and expectations for Business Associate Agreements. They should have undergone a SOC2 or HITRUST audit to know what kind of audit evidence will pass. This role should have both a business understanding of risk, controls, and how to build cooperation with stakeholders. Please apply online and help me spread the word by tagging folks in your network: https://lnkd.in/g9h_cYe8 The role is 100% remote.
-
Patrick Tan reacted on thisPatrick Tan reacted on thisBy week two of one customer’s onboarding, the platform was ingesting half the planned log sources and generating behavioral alerts. Their analysts were already using it. We still had data onboarding to finish. The customer had six weeks to retire their old insider risk platform, so training ran alongside the implementation. As each source came online, analysts could look at alerts from their own environment, investigate the behavior, and start responding to incidents. Their feedback also helped us tune the models while the rollout was still underway. Our Customer Success team coordinated the onboarding end to end, and I led the implementation. Training is part of every onboarding we do. On this project, starting in week two gave the analysts time to learn while we were still working closely with them. That is something I look for in a rollout plan now: when does the team that will run the platform actually start using it? If that only happens at handoff, we have left too much learning until the end. When do your operational teams start working in a new platform? #TechnicalProgramManagement
-
Patrick Tan reacted on thisPatrick Tan reacted on thisShare a photo from your work, no context allowed Okay, I'll start:
Experience & Education
Licenses & Certifications
-
Certificate of Specialization in Entrepreneurship and Innovation
Harvard Business School Online
Issued
Recommendations received
19 people have recommended Patrick
Join now to viewOther similar profiles
Explore more posts
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content