Security Is Not a Technical Problem (opens in new tab)

2026-06-22 --- Every now and then I meet a \(usually\) young and passionate security practitioner, uttering sentences like: “But this is just the bare minimum, we have to do \(insert here: firewalls, phishing simulations, SAST, bcrypt, encryption at rest\.\.\. pick one\)\. We cannot work without it\!“ I’m afraid I have bad news\. We absolutely can work without it, even though we disagree\. I know you don’t want to hear this, hell I remember I didn’t like hearing this, but here goes\. Sec...