On 18 October I was in Bergamo for NoHat 2025, and I found myself thinking about how easy it is to live in a bubble when you work with technology. We think we understand cybersecurity because we know how firewalls work, how to configure an authentication system, how to handle vulnerabilities in a web app. Then you hear from someone who works with critical infrastructure or with AI systems, and you realise your mental model maybe covers 20% of the picture.
It isn’t that what we know is wrong. It’s that the world is wider and more complicated than we tend to admit when we’re immersed in our own specific patch.