Highly visible security breaches have serious consequences for organizations, such as lost revenue and stolen intellectual property. The security industry is improving its effectiveness at collecting and analyzing security telemetry, resulting in better detection rates of malicious attacks. We will explore why breaches occur at an alarming rate despite this progress, and what we should do about it.