If You Dodged Yesterday's Bullets, Your Stack Is Next
Supply chain and platform breaches are no longer hypothetical. How fast can you patch your whole dependency tree, rotate every credential, and contain the damage? The best time to invest was before yesterday.
It was PHP and Railway yesterday, and if you dodged those bullets, odds are it's your stack any day now.
How fast can you deploy a fix to a supported version of your entire dependency tree? How easily can you rotate all your credentials? How do you contain and assess the damage from a breach that's hopefully not a targeted one?
This isn't FUD anymore - expect it to get worse until it gets better. The best time to invest was before yesterday, the next best time is now.
Related insights
The Next Phase of AI Security Is Going to Be Less Fun
More people get to build software than ever, but the attention now required for security and breach recovery is draining a lot of the joy, especially for teams with legacy systems to bring up to date.
Cheap Agent Attacks Are Coming
The cost of attacking software systems is dropping fast. Craig Sturgis and Justin Lacey discuss the practical near-term concerns after the Hugging Face incident.
You're Going to Need to Ship a Fix in Minutes, Not Days
Agents are making it cheap for attackers to find unlocked doors. The window to invest in CI, test coverage, and fast safe rollback is now.
Get More Like This
Follow along as I build and share what I learn
Found this helpful? Share it with your network!