Guest post by Heather Lowrie, Paperclip Advisor and Content Contributor
An introduction to the author:
Heather Lowrie is a highly-experienced CISO, keynote speaker, and cybersecurity advocate that serves as an advisor for its SAFE encryption solution. With more than 25 years’ experience across cybersecurity, technology, risk, and resilience, Lowrie has led major digital and security transformations for high-impact public and private sector organizations. Lowrie was recognized by her peers as CISO of the Year at the 2024 SC Awards Europe and is a Fellow of the Chartered Institute of Information Security.
—
The risks of mis- and disinformation have come to light over the past five years, but a risk that is often overlooked lies within the cybersecurity information ecosystem. Once a dynamic space for real-time insight and community-driven knowledge exchange, cybersecurity discourse is now increasingly fragmented.
Trusted voices are scattered across disconnected channels. Practitioner insight is buried beneath layers of noise. And cybersecurity discourse is often dominated by vendor marketing or influence-based content, leaving less space for grounded, substantive dialogue that results in better privacy and security initiatives.
As the cybersecurity field faces more threats, faster change, and more public scrutiny than ever before, we must ask: how do we stay informed in a space where the signals are harder to trust?
What’s Not Working in 2025:
- Over-indexing on social media: Platforms amplify performative content, rather than nuanced, practitioner-led insight that is rooted in research and results.
- Vendor fatigue: Useful insight is often hidden behind marketing copy. When everything is a “solution,” clarity suffers.
- Lack of context: The popular, bite-sized content flattens complexity. Information is presented without the framing needed to act responsibly.
- Closed or high-barrier online communities: Influential spaces often reward subscription level, status or affiliation over open contribution. As a result, diverse voices, innovators and early-career professionals struggle to access or engage.
- Media lag: Traditional outlets still matter—but in cybersecurity threats, innovations, and trends often move faster than media cycles.
- Paywalled insights: Analyst research and intelligence remain locked behind costly subscriptions, creating access gaps that hurt smaller teams.
What We’ve Lost—and Why It Matters
For years, the cybersecurity (or infosec) community thrived in a fast-moving, informal information ecosystem. It wasn’t perfect—but it was timely, community-led, and rich with real-world experience. That ecosystem has quietly eroded. In its absence, we face real risk:
– Fragmentation slows our ability to respond.
– Information asymmetry benefits bad actors.
– Distrust undermines collaboration within internal teams and across sectors.
What Comes Next?
We don’t need to go back—but we must go forward with intention. Rebuilding trust in cybersecurity information-sharing demands more than a new platform. It requires reorientation around core data-centric values.
Principles to Anchor On
- Decentralization with verification: We need many sources — but we must validate credibility across contexts.
- Practitioner-led insight: Real experience should drive discourse. Let’s shift the spotlight from hype, brand, and marketing performance to practice, insight, and constructive debate.
- Open knowledge: Where possible, tools, playbooks, and intelligence should be shared freely. Collective security benefits everyone.
- Cross-disciplinary exchange: Cybersecurity does not exist in a vacuum. We must bridge insights across law, economics, governance, and human behavior.
Seeds for Growth
- Support open platforms and nonprofits: Organizations like MITRE, CISA, CSA, and OWASP already prioritize public value—let’s strengthen their efforts.
- Foster curated trust communities: Invite-only, but not elitist: spaces where practitioners learn safely and collaborate meaningfully.
- Reinvest in aggregation tools: Community-curated feeds and digest tools can help resurface signal in the noise.
- Encourage regional and sectoral hubs: Locally grounded insight leads to globally relevant innovation.
Final Thoughts
The stakes are too high for anything less than a trusted, practitioner-driven information ecosystem across multiple, diverse platforms. By recommitting to openness, verification, and shared expertise, we can rebuild—and strengthen—the foundations of cybersecurity discourse.
“In an era where data supply chains are rapidly evolving and, in some cases, more disconnected, communication isn’t optional—it’s essential. At Paperclip, we believe that evolving a reliable cybersecurity ecosystem starts with empowering practitioners and enabling transparent, accurate insights.”— Chad F. Walter, Chief Revenue Officer, Paperclip Inc.