Source: Tomasz Tunguz
The economics of network infiltration have inverted—what cost $9,000 in August now costs $90. Security threats have moved from specialized, well-funded operations to script-kiddie territory. Corporate security budgets, built on multi-year cycles and legacy assumptions about attack costs, now defend against threats deployable by anyone with a credit card and basic technical literacy. An asymmetry follows: defenders operate on quarterly reviews and procurement timelines while attackers operate at the speed of AI iteration. The traditional budget arms race is obsolete.