A Side Quest takes a talk, interview, podcast, or other external appearance involving the Cyber Increment team and carries the useful ideas further through our own editorial framing. The original source always stays credited and linked.
Security reporting is very good at producing numbers. Whether those numbers tell you the service is working is a different question, and it is the one Dave's BSides London 2025 talk sets out to ask.
EXPLORE SIDE QUESTThree conferences, five years, and one recurring format: a talk where the audience decides which route it takes. The SteelCon 2026 instalment looks back across the whole run.
EXPLORE SIDE QUESTA marketing team can be genuinely good at marketing and still not understand the market it is selling into. That gap shows up in the messaging long before it shows up in the pipeline.
EXPLORE SIDE QUESTAn alert tells you something happened. It does not tell you whether it mattered, or what the person doing it meant by it. That gap is where insider risk lives.
EXPLORE SIDE QUESTAttribution gets a lot of airtime. Whether it changes what a defender does on a Tuesday morning is a different question, and it is the one this talk sets out to poke at.
EXPLORE SIDE QUESTClosing an incident is not the same as learning from it. The work that decides whether it happens again usually starts after everyone has gone back to their day job.
EXPLORE SIDE QUEST