This week · No. 03
Fourteen months, still no name. That silence is the message.
Britain’s costliest cyber attack has been called criminal, Russian and state-sponsored, but never officially. Ask who chose not to say it, and why.
Read the columnThe Contrarian Desk · Opinion
One contrarian read a week on what just happened in cyber.
What ministers, chief executives and boards need to hear, not what vendors want to sell. Every fact links to its source.
Elias Marek is the pen name of Beyond’s threat-analysis desk: practitioners with two decades across offensive security, government, finance and critical infrastructure.
All columns
3 columns
-
03
Week of 19–28 Oct 2026
3 min read
Fourteen months, still no name. That silence is the message.
Britain’s costliest cyber attack has been called criminal, Russian and state-sponsored, but never officially. Ask who chose not to say it, and why.
Read the columnThe consensus it challenges
The question is who did it.
The desk argues
Attribution is a political decision, not a forensic result.
-
02
Week of 12–18 Oct 2026
2 min read
The AI agent didn’t break in. It walked in.
Headlines call it rogue AI. The real story is the keys we leave lying around, and the fact that nobody noticed.
Read the columnThe consensus it challenges
Rogue AI is the threat.
The desk argues
The next breach comes through a trusted door.
-
01
Week of 5–11 Oct 2026
3 min read
The hacker is a company now
Ten agencies just described a Chinese government-linked hacking operation as a business. That changes who you are defending against.
Read the columnThe consensus it challenges
Another state campaign: patch, hunt, move on.
The desk argues
Cyber is geopolitics by other means.
What the desk argues from
Eight convictions. Each column tests one against the week.
They are positions, not slogans. When the evidence of a week contradicts one of them, the column says so.
- 01
Cyber is geopolitics by other means.
Read a major incident as a foreign-policy signal first, a technical event second.
- 02
Attribution is a political decision.
What a government names, and when, says more than the malware.
- 03
Visibility is the vulnerability.
You cannot attack what you cannot see. Most organisations publish their own target map.
- 04
Compliance is not security.
Frameworks describe the last war. Attackers read them too.
- 05
AI compresses the attacker’s timeline.
Faster than any defender’s procurement cycle.
- 06
Sovereignty is a security control.
Dependence on foreign cloud, models, links and satellites is a strategic exposure.
- 07
The dark web is a market, not a myth.
Follow the price of access, not the noise.
- 08
The next breach comes through a trusted door.
Supply chain, identity and service providers are the real perimeter.
How to read it
Opinion, clearly marked. Facts, always sourced.
The Contrarian Desk is opinion and sits beside our Insights analysis, never inside it. Every fact links to the page it comes from. When the desk names a state, it says who named it first: a government, an agency, a researcher or a newspaper.
- 01The event
- 02What everyone is saying
- 03The contrarian read
- 04The geopolitical frame
- 05For governments, for boards
- 06Monday morning
Tell us what must stay protected.
A first conversation covers your environment, what is at stake and the constraints we have to work within.