[0xCE0]

The obvious answer of course is that to be "cybersecurity specialist/expert", you have to be a hardcore hacker in its original meaning: to be a person who understands what things actually are (behave), not what people say they are (behave).

In my opinion, cybersec/infosec expertise/mindset should be always-on on everybody at 2025. Starting from scammers calling/messaging, to malware/spyware on devices, social engineering, physical security, people security/trustworthyness, trust/auth/integrity/encryption/backups/certs/audit-trail etc... Everything. One needs to know if one is hacked already ("Reflections on Trusting Trust.pdf"), and one needs to know when one is hacked (tripwire). And knowing what is/are your weakest link(s), because it usually defines the strength of your defences.