Security
Breaches, cryptography, and the infrastructure holding the internet together.
One Misconfigured Bucket Exposed 2 Billion Records. Again.
The breach was avoidable, the cause was familiar, and the fix has existed for a decade.
Passkeys Finally Killed the Password. What Comes Next?
Adoption crossed the tipping point this year. The next fight is over who holds the keys.
Ransomware Crews Are Running Better Support Desks Than Their Victims
Professionalized, tiered, and disturbingly responsive. Crime as a service, matured.
The Supply-Chain Attack That Sat Undetected for 14 Months
A single dependency, thousands of downstream victims, and a wake-up call the industry keeps snoozing.
The Quantum Migration Nobody Budgeted For Is Now Overdue
Post-quantum crypto is standardized. The rollout is a decade of unglamorous work.
A Zero-Day in a Font Parser Reminds Everyone What Attack Surface Means
The bug was old, the exposure was everywhere, and the patch was a scramble.
MFA Fatigue Attacks Are Winning Because Humans Are Tired
Push a prompt enough times and someone taps approve. The fix is not more prompts.
The SBOM Mandate Arrived. Almost Nobody Was Ready.
Know what is in your software, the regulators said. Turns out most teams do not.