“In a prelude to the invasion of Ukraine in 2022, Russian hackers probed and attacked Ukrainian computer networks to find vulnerabilities and exfiltrate information that might be useful in future conflicts. … As we broadened our investigation beyond NotPetya to include other cyberattacks and hacking incidents, we were able to find a consistent pattern of cultural failures linked to misaligned incentives, a disconnect between top management and technical personnel, and a general lack of awareness and engagement of the existential threat posed by cyberattacks.”