It's much easier to protect yourself if you have your infra behind a perimeter firewall you control.
Until there's a exploit for Palo Alto, Juniper, Cisco, F5, <pick your defender>.
loading story #50307765
loading story #50308921
loading story #50309633
loading story #50308012
loading story #50308197
It's also harder to explain to your customers why you're the only product they use that has a security problem when an exploit does eventually happen.
You see this already with uptime. If Github or AWS has a major outage, it's in the news and even people that don't understand software realize it's just "something happening today, everything is down".
And, unfortunately, in practice customers don't care about this inverse, when "everyone else is down but not that one product".
loading story #50310561
loading story #50311645
loading story #50310010
Until the attacker bypasses your perimeter firewall by convincing an employee to download and install malware.
loading story #50310509
Having employees (or system like bastion hosts) with unrestricted access is one of the recurring mistakes in such events. I can’t understand it.
loading story #50311642
[dead]