The Cybersecurity Spiral of Failure (and How to Break Out of It)