Paul Dant draws on real-world red-teaming experience to show why healthcare is so heavily targeted, and how attackers no longer need rare zero-day exploits to get in. Weak identity controls, excessive privilege, and lateral movement drive ransomware, and an overreliance on EDR and SIEM leaves a major gap in defense.