This has been a rough week for cyber defenders. Colleagues, friends, sleepless zombies, I am writing to assure you - the week is dead and over. Good riddance.
Things will be tough for a while, but as usual, good people get together and fix problems. The Sun rises, and we get stuff fixed.
Vulnpocalypse or not, we got this. And, technology will catch up.
Until then, risk leaders:
1. We must make the case for an extreme landscape shift, and ask for significantly more budget. If we don't get it - I'd consider leaving for an org that does realize the change. You're in high demand.
2. Stay relevant. Get yourself and your people on agents. Secure your agents.
3. Prioritize, and reprioritize. We can't do everything.
4. And while we will keep at it, self-care is not an effin' joke and should be a priority for our teams. Marathon != sprint.
--
And as always, when you want to secure your agents - do keep Knostic in mind.