Just like Cryptolocker, this will be the "Finding Out" phase for everyone who has been putting off best practice security.

But, lets be clear, Best Practice will save you. We can engineer assuming there are zero days in path. Go to your CTO now cap in hand and ask for overlapping controls, wafs, application monitoring, backups and all the other shit you haven't been doing.

Because when you find out, I will laugh, it will be very very very funny to me.

▲

taurath 4 hours ago | parent [-]

Meanwhile a huge portion of management and leadership in software companies are encouraging everyone to de facto stop looking at code and let the LLM and a bunch of boundaries handle this for you.

▲

rukuu001 3 hours ago | parent | next [-]

A couple high-profile crash & burns will get their attention.

	▲	jcgl 2 hours ago \| parent [-]
		Just like well-publicized data breaches over the years got people’s attention? Color me skeptical.

▲

protocolture 3 hours ago | parent | prev | next [-]

Which is why you need someone who is responsible for IT security without also being responsible for shipping product. An asshole who can stop releases until security is properly in place.

My understanding is this bloke gets very quickly removed from Fortune 500 companies.

Which is why I am going to need a very large capacity popcorn bucket.

▲

m_mueller 3 hours ago | parent | prev [-]

“You are a CISO who needs to review and secure all our slop, and you never make mistakes or you get shut down immediately!”

	▲	LoganDark 2 hours ago \| parent [-]
		"You are a Miso soup..."