Maybe we need to start thinking like defenders again

from here and here

 There's a lot of credence given to the idea that we need to think like attackers, but if that was all it took then we shouldn't see hacker tests getting hacked.