Post #4185839
2026-07-29 06:40 UTC
All of these vulnerabilities would eventually be found.
But, I’m going to say something controversial here… I think it’s a good thing they’ve found them.
First, it’s made people sit up and listen. There is political capital to cash in here if you’re a defender.
But second, they’ve shown their hand and the jig is up.
I can’t say how long this transition period will be, but we will very quickly hit the realms of diminishing returns. Think of this phase as all of the ‘quick wins’ being won in one go.
We can proceed to concentrate on things that matter.
Cont…
Replies (1)
-
@ADHDruid@infosec.exchange 2026-07-29 06:47
This wave will end, and end abruptly. But probably not until after your organisation has been scared into buying some AI security product or another. But this does mean that systems are being hardened in real time. In 12 months, your OS will be orders of magnitude more secure than it is today. Slopware will continue to be slung, but anything appearing on a public repo will be torn apart in seconds, meaning it wouldn’t survive in production. But when all the systems are getting more and more airtight, we will see metrics dwindle. Cont…