Hack the Hackers: 6 Laws for Staying Ahead of the Attackers

Hack the Hackers: 6 Laws for Staying Ahead of the Attackers presents a new behavioural security framework developed by Arielle Waldman to counter trends in attacker tactics. The piece notes that threat actors are increasingly abusing governance, risk and compliance frameworks and that attackers silence their incursions by exploiting gaps in governance approvals, compliance cycles and investigation workflows.

Almunajam, who conducted cybercrime and digital forensics investigations, says the framework aims to help enterprises predict attacks by understanding where adversaries invest effort to turn governance and compliance into attack strategies; he cites real-world cases where attackers manipulated event timestamps and exploited operational processes to delay detection or bypass controls.

Regarding practical steps, the author recommends focusing on aligning policies to threats rather than buying new defensive products, mapping attacker intent to governance controls, and monitoring exceptions like privileged assets to curb persistence tactics. The article, according to Black Hat Middle East and Africa 2025 in Saudi Arabia, underscores that organisations can rapidly adopt these measures within mature security teams to deliver high impact with minimal disruption.