This week’s cyber events carried one lesson: attackers targeted systems that administer, automate, and connect everything else. Resilience depended on asset visibility, narrow privileges, clean recovery, and realistic manual fallback.