My Journey from Networks to Cybersecurity: Lessons Learned, Mistakes Made

Hey there, cybersecurity enthusiasts—or should I say fellow caffeine addicts. It’s Sanjay Seth here, back at my desk (after my third coffee), and ready to share some insights from two decades in the trenches of network and cybersecurity. I’ve been around the block a few times and lived through the days when a worm could slow the entire internet to a crawl. It’s time I put some of those experiences into words.

A Nostalgic Look Back: From Dial-Up to Zero Trust

Starting as a network admin back in 1993 feels like a lifetime ago. Anyone who remembers working with old-school PSTN setups and dealing with analog muxes might recollect the charm—and constant headaches—of those days. Setting up voice and data over PSTN was no small feat, and you’d have to be part-technician, part-magician to make everything work seamlessly. Today, I’ve moved from taming wires to securing networks but those memories of pulling coaxial cables through walls are still fresh in my mind.

Then came the Slammer worm around 2003—now that was something. It was like watching a slow-motion train wreck as the worm spread from server to server faster than schoolyard gossip. I’ll admit, our responses weren’t perfect, but it taught me a lot about the urgency of patch management and crisis response. That event shaped a great deal of my thinking when I started P J Networks Pvt Ltd. And here’s the thing… it’s rare for a single virus or worm to wreak that kind of havoc today thanks to layered security models and—drum roll please—zero trust architectures.

Zero Trust: Essential, Yet Overhyped?

I’m fresh off a project where we helped three major banks upgrade their existing security frameworks to a zero trust model. Now—I’m gonna say something that might not sit right with everyone—zero trust is essential, but not the foolproof solution some evangelists make it out to be. Don’t get me wrong, implementing zero trust has substantial benefits:

• It provides greater control over internal threats.
• Strong endpoint verification and continuous monitoring.
• Reduces attack surfaces by segmenting networks.

Quick Take: Zero trust is just one (very important) piece in a larger cyber-defensive puzzle. Remember, it’s about “never trust, always verify”—online and off.

But—and this is critical—it’s not the silver bullet. It doesn’t replace proper password policies or effective patch management. Speaking of passwords… Why do companies still insist on complex passwords that users end up writing down anyway? I could go on a rant, but I’ll save that for another day. Let’s just say, all your security layers should work in harmony.

DefCon and the Allure of Hardware Hacking

Just got back from DefCon! If there’s one thing that keeps my batteries charged—besides coffee—it’s attending events where the cutting-edge meets deep technical expertise. This year, I spent a lot of my time in the Hardware Hacking Village. The atmosphere was electric, almost like being a part of an underground lab where curiosity fuels innovation.

The thing with hardware hacking is, it reminds you of how integral physical and digital security are. Your network could be Fort Knox, but if someone can slip past with a Raspberry Pi and a little cunning, you’re in trouble. Revisiting the fundamentals like securing USB ports and testing physical access (yes, really!) can save significant headaches.

Embracing Technologies—With Caution

During my time in cybersecurity, I’ve seen many technologies rise and fall—hello, cloud security, IoT, and the plethora of “AI-powered” solutions. Ah, there, I said it. “AI-powered” is a buzzword—overused and underdefined. Most AI solutions are rule-based algorithms dressed up with a fancy name. They have their place, don’t get me wrong, but they aren’t necessarily smarter or more effective than a well-configured traditional system.

Here’s the thing about AI: If it’s not adequately trained, it can become a false sense of security. Nothing replaces the vigilance and expertise of trained cybersecurity professionals willing to roll up their sleeves and work.

Learnings from My Career: Mistakes & Milestones

• Decision-making under pressure matters (like during the Slammer worm fiasco).
• Sometimes going back to basics—common sense practices—wins the day.
• Your security is only as strong as your team and their training.
• Keep your coffee flowing, but also keep your skills updated.
• Regular audits and penetration tests are non-negotiable.

Looking back, it’s clear that mistakes are the best teachers. Every misstep shapes the next decision, and sometimes it’s those almost-forgotten lessons that save your day.

Conclusion: The Road Ahead

While technology continues to evolve, one thing remains eternal—our commitment to securing our digital environments. To my fellow network admins, security consultants, and everyone in between, keep pushing boundaries and learning every day. And remember—mistakes make us better. It’s about continuous adaptation in an ever-changing world.

So, stay curious, stay secure, and maybe have one more coffee while you’re at it.

Until next time,
Sanjay