Blog
The Execution
The cybersecurity industry has spent decades and trillions of dollars building tools that operate after the fact.
Detect the breach. Respond to the incident. Recover the systems. Investigate the fraud.
Every one of those disciplines assumes the damage has already occurred and the goal is to limit it. Below, we examine what that assumption costs: real breaches, real losses, real organisations that did everything the industry told them to do and still lost. The question running through every post is the same: at the moment the consequential action executed, where was the human who should have stopped it?
The Stryker Attack and What Happens When Geopolitics Reaches the Execution Boundary
A Nation State Walked Into a Medical Device Company. The Systems Had No Answer.
Read articleThe Marks & Spencer Attack and the Help Desk That Opened the Door
Same Playbook. Different Continent. £300 Million.
Read articleThe Attacker Had a Valid Login. That Was Never the Problem.
The Coinbase Insider Breach and the Threat That Perimeter Security Cannot Touch
Read articleBlog content generation is AI assisted.