im not sure i'd say the attackers are more skilled -- you can get pretty far with the right attitude and a VM running kali linux. i know several red teamers an

im not sure i'd say the attackers are more skilled -- you can get pretty far with the right attitude and a VM running kali linux. i know several red teamers and they often describe how painfully basic and routine a lot of pentests can be. spend a week using the best hacking practices of 2018, etc. the difference is the attackers now often need no skills since the burning tokens do it all for them. tier 1 helpdesk types who can't even spell RDP can still hit as hard, or reasonably hard, as their tier 3 expert sysadmins. college seniors with strong dev skills now can pace or exceed secrious app-sec engineers.