Sophos Versus the Chinese Hackers

This piece presents a high-level opinion on pervasive global cyber espionage and advises minimizing connectivity (isolation/segregation with DMZs and hardened bastion hosts), deploying covert instrumentation with rapid automated shutdowns, and prioritizing pragmatic “bang for the buck” controls over traditional risk-based prioritization, while emphasizing the insecurity of commercial software and the relevance of physical-security lessons.