The computer security industry has long been broken and needs some serious fixes. The world spends billions of dollars fighting cybersecurity threats, more and more each year. We have accepted that computer security is so bad that we must adopt an assume breach mentality. The first step in fixing a problem is admitting you have one. The core problem is that most computer security defenders are not right-aligning their defenses against the biggest threats they face. This is exacerbated because defenders dont focus enough on the root cause of successful exploits.”]