Category: Work

Security matters more than ever, and I think profit is starting to crowd out the actual security work. Influencer content, pushy marketing and paywalled education all point the same way: the industry has at least entered its snake oil phase. The focus has moved from technical content to selling solutions.

The business of fear-based marketing

Vendors have gotten very good at fear-based marketing. They warn about data breaches, ransomware and identity theft, then offer their own product as the fix. It isn’t entirely dishonest, since the threats do exist, but the risks are often exaggerated to sell things people don’t need or that cost too much.

Sponsorship-driven advice

Scroll through security content on YouTube or social media and you’ll see the same thing over and over: creators promoting VPN services, password managers or paid security courses. Some of those tools are good, but the aggressive sponsorship model makes me doubt the advice. It’s hard to give unbiased opinions on products when the companies that make them pay for your content.

It gets worse when creators recommend tools without checking whether they work. The line between security education and a sales pitch keeps getting blurrier.

The paywall problem in security education

Security education is essential, yet many platforms charge exorbitant fees for courses that may not be worth it. Some influencers push their own training programs while dismissing free or cheaper alternatives, so knowledge ends up behind expensive paywalls.

Newcomers either spend thousands of dollars on questionable courses or piece things together on their own from scattered free resources. Good education does cost money to produce, but putting profit ahead of access makes it harder to get in without financial means.

How to get through the snake oil era

There are still ways to find trustworthy advice:

• Prioritize transparency: Look for creators who clearly disclose sponsorships and affiliations.
• Verify security claims: Research products independently and check expert reviews rather than relying on promotional videos.
• Seek community-driven knowledge: Open-source cybersecurity communities and government-backed initiatives often provide credible information without commercial bias.

Security is a real and necessary industry, but marketing and profit sometimes override genuine security concerns. Consumers and professionals should treat security products, advice and education with a healthy dose of skepticism.