The federal courtroom in Manhattan on April 8, 2026 provided a cold autopsy of a terminal security architecture. When Muhammad Shahzeb Khan entered his guilty plea for plotting an ISIS-inspired “slaughter” in Brooklyn, he wasn’t just admitting to a crime—he was exposing the gaping hole in what passes for modern cyber statecraft. Khan was an administrative ghost. While our security apparatus was busy verifying his lack of a prior criminal record—the bureaucratic check-the-box approach—Khan was