Black Hat Takeaway: Everyone Talks Prevention, But Who Detects Compromise? by Lucie Cardiet

A Black Hat–style commentary arguing that prevention-focused security is insufficient because threat actors increasingly rely on valid credentials, session hijacking, and native tools to blend in; it recommends an "assume compromise" approach and visibility across identity, cloud, and network layers with behavior-based, log-independent detection to expose post-compromise activity.