This retrospective is intended to help security professionals make sense of the morass of threats and vulnerabilities that made 2021 an especially risky year. Practicing cybersecurity fundamentals — including finding and fixing critical vulnerabilities and addressing misconfigurations in the cloud and Active Directory — is more important than ever. We want to bring to light the sheer scope of the challenge security organizations face, in hopes that it will spark discussion that will lead to true, lasting change in how cybersecurity is managed.