About
TL;DR - senior enterprise AI and cybersecurity product leader. Currently delighted to be…
Activity
5K followers
-
John Wyss shared thisAnother day, another AI-based threat vector, with no effective defense yet, this time: "AI Recommendation Poisoning." Researchers documented more than 50 hidden prompts across 31 different companies' offerings, which embedded commands in buttons labelled "Summarize with AI" or similar. Hidden commands plant lasting preferences into an AI assistant's memory to bias affinity toward the brand for future recommendations. https://lnkd.in/g-AmxHY5
-
John Wyss shared thisToday, F5 celebrates 30 years of innovation. Having created incredibly useful products and an entire category: ADSP, but now reinventing itself in the dawn of the AI age. Here's a fun one I just learned from Joel Moses, CTO: this is the movie scene which inspired the name. (File away for tech trivia!) https://lnkd.in/g-939eFc
-
John Wyss shared thisFurther guidance from the G7 Cyber group on evaluating your quantum riskJohn Wyss shared thisWhen the G7 signals quantum risk, it’s a warning security leaders should take seriously. In my latest blog, I look at what the G7’s stance on quantum computing means for financial institutions of all sizes and why treating post-quantum cryptography like the next routine software update is a mistake. This is a structural shift that affects cryptography, infrastructure, governance, and operating models—not something you patch your way through. Quantum timelines are accelerating, and the organizations that act early will be far better positioned than those waiting for a mandate. Read the blog: https://lnkd.in/e6s6ZrVP #QuantumSafe #PQC #DigitalTrust #PostquantumWhen the G7 Signals Quantum Risk, It’s Time to ListenWhen the G7 Signals Quantum Risk, It’s Time to Listen
-
John Wyss shared thisEven the most responsibly trained public foundation models don't have safety alignment sufficient for your enterprise. ⚠️ Modern AI requires centralized guardrails that secure data, detect adversarial threats, and enforce policy across every model and agent. F5 shares how AI guardrails are evolving, and what enterprises need to deploy AI with confidence. 👇 http://ms.spr.ly/6044tN7ji
-
John Wyss shared thisCheck out the most impactful acquisitions in 2025 in networking, many going beyond the traditional workloads, including F5 on a march with MantisNet, Fletch, and CalypsoAI for offensive and defensive AI security. https://lnkd.in/gnre7UCq
-
John Wyss shared thisStephanie Reynolds is an amazing executive coach and interviewer. If you're interested in different views on leadership, you might check out the podcast series. In this episode I had the good fortune of being able to share what I'm seeing, how the faster pace of innovation, partly driven by AI, is changing what we need from leadership.John Wyss shared thisOn the next episode of The Toughest Choice, I talk with John Wyss, who's got a tremendous background in Tech Leadership in with major organizations in the Puget Sound, and is currently leading in the AI Security space with F5. Listen as John shares his insights, and on the ground experiences about the challenge of leading in the quickly emerging AI era. https://lnkd.in/g3ixyS9r
-
John Wyss reposted thisJohn Wyss reposted thisToday we’ve announced our strategic partnership with CrowdStrike which allows us to integrate the CrowdStrike Falcon XDR automated detection and OverWatch threat hunting security services directly into F5 BIG-IP via the CrowdStrike Falcon sensor. I’m proud to say this is just one way we’re augmenting BIG-IP security. More to come on that soon. The truth is the onset of AI has allowed threat actors to be faster, smarter, and less detectible. The attack surface is everywhere. We can’t wait for the attack, we must hunt it out before it even strikes. Here’s how: https://lnkd.in/gmbRR_Bt
-
John Wyss shared thisMy favorite thing about LinkedIn is keeping up on the adventures of former colleagues and friends. I realize I haven't posted my own recent update! In July I joined F5 to advance AI Security, and this week we've acquired Calypso AI, to bring customers both a defense and a red team solution. If you find yourself near the F5 Tower in Seattle, stop and say hi! https://lnkd.in/gnEHtqWwF5 to acquire CalypsoAI to bring advanced AI guardrails to large enterprisesF5 to acquire CalypsoAI to bring advanced AI guardrails to large enterprises
-
John Wyss shared thisMost companies don't yet have a strategy for observability, much less policy-based controls, for web-based GenAI, and now we're seeing the disclosure of the first zero-click attack on a local AI agent. Threat actors can hijack the endpoint AI Assistant just by sending an email. AIM Security researchers designated this "Echoleak," which is now in NVD as CVE-2025-32711. The AI ingests the email, obeys the hidden prompt instructions, exfiltrates private data and then, get this: covers its tracks. No phishing or traditional malware installation needed. This was demonstrated in MSFT CoPilot (and patched in 5 months) but this category of attack vector is likely to be productive further, and on other platforms. TL;DR: Agentic agents are a new protect surface which require additional controls, urgently. #AISecurity #SecurityLeaders #AdversarialAI #AIvulnerabilities https://bit.ly/4dYFp9PYou are viewing this page in an unauthorized frame window.You are viewing this page in an unauthorized frame window.
-
John Wyss liked thisJohn Wyss liked thisHow many times have you thought "I should write a book about it!" I've thought about it quite a few times. Then one day I said it to Brian Solis, and he said "I agree, when should we start?" Twelve months later, after countless recordings of video exchanges, Zoom calls, endless editing swaps and reviews I'm happy to say it is finished! I'm here at Vegas proudly looking at "Infinite" - a book that I got to co-author with Brian. I will admit that working with someone who is a 9 times best selling author does make it easier, but the education in going through the process of publishing a book was truly amazing! As a book I genuinely think it can inspire people to think differently about not just how to implement AI, but how to use it to transform your business. If you happen to be at ServiceNow K26 then there are copies in both the meeting center and Exec Circle. We both look forward to feedback if you get to read it! We will formally launch it in June but happy to be able to get some early copies out there! #know26
-
John Wyss reacted on thisHonored to be recognized alongside so many incredible women here at Zscaler on this year's #WomenOfTheChannel list. What a treat it is to be a part of this team! #Zscaler #CRN Anthony Torsiello Laura Davis Lauren Cutler Carilu Contreras Melander Maureen "Mo" NachtsheimJohn Wyss reacted on thisProud moment for Zscaler and our partner community: 13 of our leaders were named to CRN’s 2026 Women of the Channel list, with Melissa Nacerino recognized as a Power 100 honoree. In cybersecurity, innovation depends on perspective. Diverse leadership isn’t just representation, it’s a strategic advantage that helps us solve tougher challenges, build stronger programs, and deliver better outcomes for partners and customers. To all 13 honorees: thank you for your vision, mentorship, and impact across the channel. You’re raising the bar for what leadership looks like and strengthening the ecosystem in the process. Congratulations on this amazing recognition! Phanneth Wood Laura Davis Elorie Widmer Carilu Contreras Melander Tricia Halbert Josie Smoot Jane Weinheimer (Bunn) Lauren Cutler Heather Moore Maureen "Mo" Nachtsheim Victoria Vuong Dorea G. #WomenOfTheChannel #ChannelLeadership #Zscaler #CRN https://lnkd.in/dZc_26yn
-
John Wyss liked thisJohn Wyss liked thisThis quarter's Community Impact Grant recipients remind me why F5 is special. These F5ers saw needs in their communities got involved, and applied for funding on behalf of causes they believe in. Then, they were selected by a committee of peers to receive $5K each for local nonprofits. Congratulations to each of you and thank you for making a difference in the communities you call home. Vladyslav Bobrovnyk for Wonderland Child & Family Services Naomi Freiman for United Hatzalah of Israel Rachael Shah for Old Dog Haven Allison Lamb for Plymouth Housing Alex M. Dunne for The Center for Wooden Boats
-
John Wyss liked thisJohn Wyss liked thisAgents are becoming persistent infrastructure. That is the shift long-horizon agents like Kimi K2.6 are exposing. We went from scripts to services to containers to functions. Now agents are creating categories we do not yet have good names for: agent runtime, agent gateway, agent identity provider, agent mesh. The API gateway pattern has to evolve from endpoints and verbs to goals and workflows. I shared more with VentureBeat here: https://go.f5.net/gwniu4s7Kimi K2.6 runs agents for days — and exposes the limits of enterprise orchestrationKimi K2.6 runs agents for days — and exposes the limits of enterprise orchestration
-
John Wyss liked thisJohn Wyss liked thisI'm a fan of analogies, and I've gotten good feedback that one I shared at AppWorld resonates. With a father and brother who are both architects, I think of enterprise IT like managing a city. Every infrastructure environment: every data center, cloud region, and colocation facility is a neighborhood. Your applications are the buildings. APIs are the roads connecting everything. And the data flowing through it all is the power grid. If you're a technology leader who has ever struggled to explain this complexity to someone outside IT, this analogy might help. Read on for more, then make it your own: https://go.f5.net/epklihcgYour infrastructure is like a city. Here's why that matters.Your infrastructure is like a city. Here's why that matters.
-
John Wyss reacted on thisJohn Wyss reacted on thisSuper excited to announce formation of Simbian Research Lab and the first delivery from our team - Cyber Defense Benchmark, the world's first realistic benchmark for SecOps. While all others benchmarks use Q&A, we use deterministic scoring on real world telemetry. Our findings are revolutionary. The same frontier LLMs that produce super-human results on cyberattack struggle on defense. In fact, the best one (Opus 4.6) could score only 4.5%. We prove that today's LLMs must be supplemented by a sophisticated harness, something like Simbian AI SecOps, to improve their accuracy. Defense is much harder problem than attack as it requires reasoning with partial information. We cannot solve security without a rigorous data-driven approach. Simbian today takes a baby step towards that, more to come. Link in the comment below.
-
John Wyss liked thisJohn Wyss liked thisThe amazing work of some colleagues at the launch of Artemis II at KSC, released by NASA today. So happy I may now share this amazing work, that are really works of art. Now for the flip side on Friday, imaging re-entry. #nasa #artemisII #launch
-
John Wyss liked thisJohn Wyss liked this14 years ago, I walked into a mentor orientation for Community for Youth with no clue how much this program was going to enrich my life. I have met so many inspiring people along the way and feel so very lucky to be able to call these people my friends and chosen family. You can read a little bit about why I've stayed with CfY all of these years on my fundraising page for WAGives. https://mtyc.co/hphlcg. If you're interested in learning more about becoming a mentor or board member, please let me know! Or you can apply directly at https://lnkd.in/gHJ-wtGC.
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
-
Massachusetts Institute of Technology
4.0
Executive Program
Computer Science and Artificial Intelligence Laboratory -
-
-
-
-
Licenses & Certifications
Patents
-
Gesture-based tagging to view related content
Issued US US20130151339 A1
Computer-readable media, computer systems, and computing devices for enabling a user to view content related to an item within media content is provided. In one embodiment, a tagging gesture that indicates a user interest in an item presented within media content displayed to the user is detected. Such a tagging gesture can define a region of displayed content having the item. In response to detecting the tagging gesture, an advertisement provided by a third party that is related to the item is…
Computer-readable media, computer systems, and computing devices for enabling a user to view content related to an item within media content is provided. In one embodiment, a tagging gesture that indicates a user interest in an item presented within media content displayed to the user is detected. Such a tagging gesture can define a region of displayed content having the item. In response to detecting the tagging gesture, an advertisement provided by a third party that is related to the item is presented.
-
Multi-dimensional content delivery mechanism
Filed US US20130239026 A1
A content delivery mechanism as a single object (also referred to as object bar) in a user interface. The object bar is a dynamic, context sensitive, adaptive multi-dimensional content delivery vehicle. The polymorphic nature of the object bar and the dynamic mechanism of delivering assistance content and controls (e.g., chat, videos, etc.) make it suitable for use in different application and customer scenarios.
Projects
-
Microsoft Outlook Advertising
-
The objective of this project was to re-envision the way Microsoft does advertising within the updated Outlook.com environment. Gone were your traditional banner ads, and were replaced by relevant, contextual and user friendly product ads, display campaigns and product offers and deals.
Other creators -
-
Microsoft Commerce Server
-
Microsoft's eCommerce platform providing shopping cart, catalog, user profile, marketing/targeting and businness intelligence services.
Other creators -
Languages
-
Japanese
-
Organizations
-
Cloud Security Alliance
Professional Member
- PresentCloud Security Alliance (CSA) is a not-for-profit organization with the mission to “promote the use of best practices for providing security assurance within cloud computing, and to provide education on the uses of cloud computing to help secure all other forms of computing."
-
ISACA - Information Systems Audit and Control Association
Professional Member
ISACA is an independent, nonprofit, global association that engages in the development, adoption and use of globally accepted information system knowledge and practices. ISACA provides guidance, benchmarks and governance tools for enterprises.
-
ISC2 - International Information System Security Certification Consortium
Professional Member
The International Information System Security Certification Consortium, or ISC2, is a non-profit organization which specializes in training and certifications for cybersecurity professionals, and fostering community engagement. It has been described as the "world's largest IT security organization". All certified ISC2 professionals are required to support the ISC2 Code of Ethics.
-
Scrum Alliance
Professional Member
Scrum Alliance is a member-driven not-for-profit organization dedicated to advancing agile principles and scrum practices. Enterprises around the world look to us for guidance and training. The Scrum Alliance offers industry-respected certifications for expertise implementing, leading and coaching Agile methods.
Recommendations received
31 people have recommended John
Join now to viewOther similar profiles
Explore more posts
-
Mark Kaplan
#OpenTelemetry is rapidly solidifying its position as a fundamental tool in the world of #observability. In his latest #blog, 'What is OpenTelemetry? An open source standard for logs, metrics, and traces,' Jay Livens covers everything from OpenTelemetry data to the value that Dynatrace and OpenTelemetry deliver together. https://lnkd.in/dCDsfyEz
-
Michele Chubirka
California AG sues city for allowing out-of-state searches of license plate reader database https://ift.tt/kvT8Q7f Police in El Cajon, California, searched their Flock Safety database of license plate activity on behalf of multiple out-of-state entities — in violation of California law — according to Attorney General Rob Bonta. via The Record from Recorded Future News https://ift.tt/qIjGkVD October 03, 2025 at 03:30PM
-
Vijoy Pandey
Existing IAM concepts for agent identity and auth? Are you serious? Autonomous agents work with probabilistic intent and outcomes, shift roles rapidly, cross org boundaries, may exist ephemerally for a single task, but operate at machine speeds and scale. Your existing identity infrastructure was built for humans or machines, not agents that spawn, collaborate, and disappear in seconds. We built an Agent Identity Service powered by AGNTCY | A Linux Foundation Project that delivers: Cryptographic badge generation for MCP Servers and AI Agents using A2A / MCP / OASF specs Human-in-the-loop policy authorization for critical actions with real-time mobile approvals Native integrations with Duo Security, Okta, Ory Corp, plus AGNTCY's DID-based identity provider Tamper-proof badges that prove identity and capabilities. Plugs into whatever identity infrastructure you already run. Free SaaS built on a Linux Foundation project because agent identity standards cannot be vendor-controlled. Code on GitHub. We created a currency exchange demo showing the complete workflow. Financial assistant authenticates with exchange agent, both verify cryptographic badges, human approval required for transfers. Every action traceable to specific agent identity. No more wondering which agent transferred money or called that API. No more forensic investigations when something breaks. Read the blog by Julu Panat & Hervé Muyal for details https://lnkd.in/g_MnVuQ7 Try it. Tell me what works, what doesn't.
-
Corey Munson
Another round of vulnerabilities...another recommendation for application allowlisting | "Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution" - MS ISAC Advisory 5/14/2025 https://lnkd.in/ghk6jygw #cybersecurity #allowlisting
-
Daniel Young
Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?
1 Comment -
Ashish Mohindroo
Recent outages at leading public clouds, including AWS and Azure, highlight a growing reality: even the most trusted platforms can fail. Organizations must invest in strategies that keep mission-critical databases running seamlessly, so business continuity isn’t left to chance. Investing in a well thought out hybrid cloud strategy can ensure, in case of a similar outage in the future, that your databases can still keep running without any disruption. Thanks to Mohammed Karam & Daljit Singh for authoring this blog on how to implement a resilient hybrid cloud architecture for your mission critical databases. Also check out the demo on how the platform switches between databases on public clouds and on-prem. #NDB #Nutanix #Databases #Hybridcloud
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content