init 6

Day-Zero Normal

Thu, 16 Apr 2026 00:00:00 +0000

I wrote a CISO field brief. It’s called The Day-Zero Normal, and it exists because the AI-and-security conversation has split into two useless camps: the doom crowd writing thousand-word threads about extinction, and the “it’s just cyber kicking up another storm” crowd waving it off. Neither helps you on Monday morning.

Twenty-five years on the offensive side of this business taught me what actually shifts a program. This brief is what I’d hand a CISO who has a board meeting next week and a budget cycle next quarter.

What is init6.com?

Mon, 13 Apr 2026 00:00:00 +0000

Every Linux admin knows what init 6 does. Reboot.

I bought this domain because of a joke played on me when I was learning how hacking worked. Someone told me to init 6 a production box and I did. The mistake stuck. Years later I keep returning to the metaphor. Our industry runs on stale memory and hanging processes: old playbooks, old reflexes, old defenses patched the same way every time. A lot of it is ready for a reboot.

About

Mon, 01 Jan 0001 00:00:00 +0000

I’m Rob Fuller (mubix). Security executive with 25+ years across military, government, consulting, big tech, aviation, and healthcare.

I build security programs that protect people, not programs that punish them for not being security experts. It’s not a forklift driver’s job to spot a phishing email. It’s my job to make sure they never have to.

My career arc: Marine Corps Combat Engineer to Pentagon Red Teamer to Fortune 7 VP of Information Security. Along the way I built technical credibility I never outgrew and strategic range across industries. I’ve built and led multiple security organizations (largest: 25+ across Red Team, Vulnerability Management, EDR, and Endpoint Strategy), directed a $25M IAM program protecting global aviation, and served on an AI Security Review Board before most enterprises were having that conversation.

Services

Mon, 01 Jan 0001 00:00:00 +0000

I take a limited number of engagements per year.

Speaking and Keynotes

I speak at conferences, company events, board meetings, and closed-door executive sessions. Topics I cover:

Offensive security: what red teams find versus what the reports claim
Application security, without the theater
Building security programs that execute
The move from practitioner to leadership

Board and Advisory

I’m open to independent and advisory board seats, plus advisor roles at security-adjacent companies. I can be the security voice on a board that doesn’t have one, and I’ll push back on product choices that look clean on a roadmap but leave exposure behind.