Search for a command to run...
The Comforting Cybersecurity Lies We Tell Ourselves”
I am a full-stack software developer driven by the goal of creating scalable solutions to automate business processes. Throughout my career, I have successfully developed web, mobile and USSD applications that serve thousands of users, both for profit and non-profit.
No comments yet. Be the first to comment.
Kenya is often celebrated as the “Silicon Savannah” — a country known for mobile money innovation, startup culture, and rapid digital growth. From fintech to e-commerce, new apps are launched every ye
Perfectionism often looks like excellence on the outside, but inside it quietly becomes a barrier to progress, confidence, and fulfillment. The Downsides of Perfectionism Perfectionists often struggle
Kenya loves celebrating tech: more developers, more startups, more digital infrastructure. The narrative is clear: if you’re in tech, you’re winning. But here’s the uncomfortable truth — most of what
There is a quiet performance happening in African tech. On social media, we speak Kubernetes.In production, we deploy chaos. We proudly announce: Microservices Event-driven systems Serverless archi
In Kenya today, social media is no longer just entertainment. It is: A CV A branding tool A social class signal A relationship filter A moral scoreboard We have quietly turned Instagram, X, Facebook, and TikTok into character assessment tools....
When it comes to cybersecurity, over confidence can be dangerous. Many organizations and individuals believe they are well protected, but they often rely on a false sense of security. These illusions create blind spots that attackers are more than happy to exploit.
In this article we will focus on some of the common illusions and how to navigate through.
For years, installing antivirus was considered the ultimate protection. But attackers have evolved. Modern ransomware, phishing attempts, and zero-day exploits slip past traditional antivirus tools with ease. Antivirus is still useful, but it’s only one lock on a very large door. Without additional layers like endpoint detection, frequent updates, and user training, it gives more comfort than true protection.
Firewalls are often treated as digital walls that keep intruders out. But many breaches happen from the inside. A firewall won’t stop an employee from opening a malicious attachment or prevent an insider with the right access from causing damage. Firewalls are essential, yes — but they are just one layer in a multi-layered defense system.
Small businesses, schools, and even individuals often assume hackers only care about large corporations. In reality, cybercriminals love easy prey, and smaller organizations with weaker defenses make attractive targets. Being small doesn’t make you invisible; it makes you vulnerable. The good news? Even basic steps — like enabling multi-factor authentication, keeping systems patched, and maintaining secure backups — can significantly raise the bar.
The move to cloud services has brought great convenience, but it has also introduced a dangerous misconception: that security is entirely the provider’s responsibility. In truth, cloud security is shared. Providers secure the infrastructure, but the customer must secure their own data, access, and configurations. A misconfigured storage bucket or weak admin password is still your problem — not the cloud vendor’s.
A different kind of illusion lies in treating compliance as the same thing as security. Passing an audit often gives organizations a false sense of achievement. Compliance is important, but it only proves that you met minimum standards at a specific point in time. Hackers don’t care about your certificates or ticked boxes — they care about your weak points. Real security means going beyond compliance and nurturing a culture that adapts as new threats emerge.
Perhaps the most underestimated risk is the human one. Many leaders assume employees are too smart to fall for phishing emails. But attackers prey on psychology — fear, urgency, and curiosity — and even well-trained staff sometimes click. The answer isn’t just more awareness sessions. Organizations need a culture where staff feel comfortable reporting suspicious activity, backed up by simulations, and layered defenses that don’t rely on human perfection.
The greatest threat in cybersecurity isn’t only the hacker on the other side of the screen — it’s the false confidence that makes us lower our guard. Breaking free from these illusions and embracing a layered, proactive approach is how organizations and individuals move from the comfort of myths to the reality of resilience.