>Now imagine that we had spent all these resources on doing the basics: ensuring your organization has an up-to-date and comprehensive asset inventory with fine-grained package listings; building infrastructure that supports regular, frequent, and automated OS and applіcation updates; automatically rebooting systems when they hit, say, 30 days of uptime to ensure these updates are picked up;

That would still leave the root cause of most of our problem un-addressed, ambient authority based Operating Systems are fundamentally insecure. Unfortunately, all of our systems share that architecture.