The cyber weak point increasingly sits beyond the core stack. Fresh warnings on messaging app targeting, botnets built from neglected devices, and the resilience of threat actors after takedowns all point to the same problem: organisations still struggle more with behaviour, asset visibility, authentication, and third-party control than with encryption…