Cybersecurity Insights From Decades of Experience

So here I am pouring my fourth coffee, still buzzing from DefCon’s hardware hacking village — because nothing gets you closer to that early heyday of networking than working with soldering irons and micro controllers. I have been on this cyber security roller coaster since 1993 when I used to manage Multiplexers Multiplexing voice and data over PSTN to today where I run my own security outfit P J Networks Pvt Ltd. And here’s the reality you won’t discover in glossy marketing brochures — cybersecurity is as much about the past as it is about the future.

A Wake-Up Call From the Slammer Worm

One of my first big wake-up calls was in 2003 with the Slammer worm. It was a small Internet shitstorm, but it taught me (the hard way) that no network— no matter how solid you think it is — is really invincible. It was an unwelcome reminder that attackers will always get in — especially if you’re complacent. And complacency? It’s the actual enemy – not the “zero-day” exploits or AI bots.

The Importance of Zero-Trust Architecture

Three banks I’ve worked with recently, for example, have deployed zero-trust architectures. This is more than just the latest buzzword everyone throws around—it’s must-have in today’s climate. There’s also a significant shift in mindset: do not trust any device, user, or network by default. But here’s the catch — implementation is not simply plug-and-play.

What Zero Trust Really Means (And Why It’s Not Magic)

Zero-trust is something like having a guard dog — only more of a sequence of locked gates — in front of every room in the house. Imagine your old family sedan, only now with high-tech new locks on each door and the ignition. You’re not just trusting the key; you verify every interaction before granting access.

• Check every request for access (yes, even from a manager).
• Micro-segmentation to prevent lateral movement (don’t wander around your “network house”).
• Continuous monitoring — because the bad guys don’t sleep, and neither can your defenses.

But guess what? I have seen desks with a zero-trust policy on paper, but both half-baked incident response (IR) plans and people, and staff who are just too tired to be able to catch any more issues. Your tools are only as good as the folks running them.

A Nostalgic Look at Networking

Many in our industry working from home during this quarantine have depended on S.N.L.30, Jitsi, Hangouts and other videoconferencing software, often at the mercy of their internet a near-existential threat during the quarantine. We’ve all reminisced about the early days of networking, and some have started hosting virtual office hours to share that knowledge with early-stage founders now working from home. But it’s more than just a quaint trip down memory lane:

What if we used this opportunity to do more than fight fires? What if we taught early-stage founders how to build strategic, scalable networks, to apply the leverage we’ve learned through networks to our businesses? It’s too good an opportunity to squander.

So here are some questions to consider in the days and weeks ahead:

• What analogies to the early days of networking are there for early-stage founders now working from home?
• If there is anything we wished we could scale in our businesses to reach before quarantine, how might we do it now?
• What if every early-stage founder this month hosted five virtual office hours to teach something free to anyone who might find their knowledge helpful or interesting?
• What if this unlocked the potential for every early-stage founder to convene an experiment and test how they might create value for someone else using the internet? And what if that person wasn’t themselves?
• How do the skills we’re using to manage online our social networks apply (if at all) to business-to-business, consumer or two-sided networks?

In the early days of the quarantine, you’ve started to relearn how to build a new network. What’s more, many of you are bringing your worst habits with you! Just because you’ve got a job as a product, business development or partnership manager doesn’t mean you’ve got anything new to learn. In fact, the most successful network-effects online resources today can be traced back to humans for the same reason: They’re uniquely tailored to the needs of the people who are using them.

You may be a productmen, but have you considered joining an online campus hangout? Here’s your homework for this month: Find three people who are studying what you are interested in, and figure out how to learn from them.

Reflections on Early Networking

My first real job was a network admin, setting up multiplexers to send voice and data over the PSTN – a giant, clunky, mechanical beast by today’s standards. But those were the days when we first learned about real reliability and redundancy. You had rows and rows of hardware that you could touch, turn, fix when things went wrong.

Fast forward two decades and you’re wrangling ephemeral virtual machines and cloud firewalls that are sometimes a little too abstract. No physical wires to follow, no blinking lights — a blessing and a curse.

Regarding Password Policies: Enough Already

I get it. We want complex, uncrackable passwords. But when you force 16-character gibberish filled with mixed capitals, symbols, AND those mandatory changes every 30 days? People just note them on Post-It’s slapped on monitors.

One size does NOT fit all:

• Encourage passphrases over passwords. Easy enough for thought, difficult to guess.
• Combine with multi-factor authentication (MFA) because that is the true security win.
• Forget the 20th-century “change everything every month” model, unless you know there’s been a compromise.

Believe me, I’ve learned the hard way when it comes to passwords — locked out twice from systems I myself setup because I was a “security zealot” without any reality check.

DefCon, Hardware Hacking Village: Why Physics Isn’t Done Yet

Just returned from DefCon — and if you haven’t hung out at the hardware hacking village, then you’re missing an object lesson in “why physical security is the only security.” Not everything is firewalls and fuzzing — some of your own vulnerabilities are right under your nose.

Software can be perfectly set up with zero-trust policies, and still, hardware attacks are there to subvert the software. BadUSB attacks, side-channel tricks — these are the ghosts in the machine, the bits and bytes reminding us that security isn’t about code or policies. It’s understanding the entire ecosystem.

Practical How-Tos: Protecting Your Network Now

Listen, whether you’re running a bank or a small business, the basics are the same:

• Patch promptly. Slammer worm took advantage of unpatched SQL servers. Those that do not update are doomed to repeat themselves.
• Purchase next‐gen firewalls and routers — they’re your vanguard and rearguard.
• Segment your network — keep your most important assets behind layers of barriers.
• Monitor logs daily. Gone are the days of “set it and forget it.”
• Train your staff well — human error is still the 1 attack vector.

Quick Take: What I Wish Everyone Knew About Cybersecurity

• Security is not something you can buy, nor is it something you have or don’t have. No AI-powered silver bullets. Some AI tools do help — but never trust, blindly, technology.
• Zero trust is vital, but requires a cultural, not just tech approach.
• Passwords aren’t dead — they’ve just mutated. Use passphrases and MFA.
• Physical security and hardware are key lines of defense.
• Experience counts — don’t chase shiny objects; rely on the basics.

Final Thoughts: The Age of Experience Still Matters

I’ve seen tech revolutions — from analog multiplexers to cloud-native microservices. And with every shift came new tools and new threats — but also a few truths that have remained constant: Attackers adapt, users falter, defenses must evolve constantly.

Cybersecurity isn’t the sexed-up thing Hollywood paints it to be — it’s often drudgery, annoying grunt work where you’re balancing risk against budget and human behavior. But that’s precisely why a seasoned perspective is so important. I don’t just sell products or tap buzzwordy methodologies when I consult. I bring you lessons from one hell of a near-win-avoided, win-collected and yes, mistakes (so, so many of those).

True resilience means embracing your inner network mechanic — and not just the shiny dashboard. Believe me: There’s something profoundly satisfying about watching your network quietly humming along after a long day of battling out-of-sight threats — and knowing you’ve earned that peace with good ol’ sweat and smarts.

OK, coffee No. 5, let’s make this happen. Until then, keep your firewalls tight and your passwords human.