Who’s winning in the game of attack and defend?

It’s often said that the ‘playing field’ of cyber security is heavily tilted in favour of attackers. Defenders must do everything perfectly, while attackers gain the upper hand if given the slightest opportunity. But is that an accurate depiction of the contest? Not exactly, according to recent research.