What is ‘security theater’ and how can we move beyond it?

The article argues that modern security practices have fallen into ‘security theater’: too many tools generate overwhelming, low-value alerts while shadow access and static credentials leave real risks unaddressed. It recommends reducing attack surface by targeting human error, removing standing privileges and static credentials, and adopting identity- and context-based access controls to limit damage from compromised identities and improve meaningful security.