Attackers strike where defenders least expect it — in cybersecurity, certainly, but in the world of physical warfare as well. As a former military officer, I think it’s particularly instructive to look at military battles from the cybersecurity defender’s perspective. Military battles bring direct lessons and, I find, often serve as a reminder that attack surface blind spots have been an Achilles’ heel for defenders for a long time. They remind us that we have to rethink our assumptions, habits, and biases to operate at our best.
