Symantec says antivirus is dead, plans turnaround with products to help businesses minimize damages from security breaches
Symantec Develops New Attack on Cyberhacking — Declaring Antivirus Software Dead, Firm Turns to Minimizing Damage From Breaches
Context & Ripple Effects
The declaration lands after a decade in which Symantec's own reporting charted the erosion of its core franchise: its [[a:1177695|2007 threat report documented a rise in data theft, leakage, and targeted attacks driven by hackers' financial gain]], and 2012 brought the embarrassing disclosures that hackers had stolen its source code in a 2006 breach without the company knowing — including code for pcAnywhere that was then publicly released. A vendor whose own wares were breached had little credibility left selling pure prevention.
The pivot also arrives under financial duress: Symantec has been seeking defenses against activist shareholder pressure since April 2014, with an advisory role for JPMorgan Chase reported but unconfirmed. The Wall Street Journal's framing traveled unusually widely for a corporate strategy piece, with same-week pickups at ZDNet, The Register, PC World, SiliconANGLE, and BetaNews — evidence the 'antivirus is dead' argument was the industry debate of the moment.
First-order effects
- Symantec's product roadmap shifts toward breach-damage mitigation for enterprise buyers, meaning its large installed base of endpoint customers is being sold detection-and-response tooling rather than renewed signature-based protection.
- Norton, the consumer antivirus line that anchors Symantec's brand, is left defending a category its own parent company just declared obsolete.
Second-order effects
- Rival antivirus vendors must either match the 'assume breach' messaging or defend signatures publicly — Symantec's scale makes its repositioning a pricing and narrative problem for the whole endpoint market.
- With activists circling, the turnaround becomes a takeover-defense variable: if the JPMorgan-reported strategic review (still unconfirmed) progresses, product strategy and deal options will be weighed together rather than separately.
Third-order effects
- If prevention-to-response becomes the accepted frame, enterprise security budgets migrate from per-seat antivirus licenses toward incident-response retainers and platform contracts, restructuring how security revenue is earned across the vendor landscape.
The trend: Enterprise security is shifting from blocking malware at the endpoint to detecting and containing breaches, with incumbent antivirus vendors like Symantec repositioning their portfolios under shareholder pressure.