When two cybersecurity experts pleaded guilty to conducting BlackCat ransomware attacks against the very companies they were trained to protect, the industry's response was predictable: shock, condemnation, and assurances that these were isolated bad actors. But this misses the deeper, more uncomfortable truth.

The cybersecurity industry has...