We are losing the cybersecurity arms race, chiefly because we keep throwing ever more public and private resources at inadequate solutions, without ever having grasped the problem we were supposed to be tackling in the first place. That said, it’s not too late to avert our current predicament.