Headlines continue to be filled with reports of government agencies and large companies being victimized by cyber intrusions. This remains true despite a proliferation of cybersecurity guidance and large increases in global cybersecurity spending (around $150 billion per year globally on cyber products & services). Why? In addition to increasingly well-financed threat actors, the “attack surface” where these attacks are deployed is changing dramatically.