Cybersecurity teams focus too much on building defenses and not enough on understanding who attacks them. Like a World Cup coach studying the opposing team, defenders need to study threat actors to spend resources smarter instead of spreading defenses thin everywhere.
The second thing, and this is a change, know your enemy. Our industry in cybersecurity has since the beginning focused only within our walls or firewalls, right? We looked at, well, what vulnerabilities, what issues do I have, so on and so forth. And how many people watch World Cup? Anybody watch the World Cup? Oh, great games, great games. You're a coach in the World Cup. If you only focus on your players, what's your best defense play? What's your best offense play? What are the conditions of the field? You're probably missing something in your next match, because you should really be understanding what the other team brings to the table. And we haven't done that in cybersecurity. We have to start doing that because it allows us to be more efficient, more effective, and we could allocate our resources better. We can't peanut butter across anymore. We have to focus.
The Future of Cybersecurity: How AI Is Exploiting Technical, Behavioral, and Process Vulnerabilities
