Insights

Last week felt like a century made of "daycades," with each day like living a full decade. From the US government's ban on DeepSeek in federal civilian agencies, to a certificate authority with a private key of 4, to the PHP vulnerabilities, it seemed like the flood was never going to end. I struggled to focus long enough to get this blog out, and kept hearing echoes of multiparty disclosures past, starting with the first one, Dan Kaminsky's DNS bug. This bug was the first to

Anthropic published its first Glasswing update and the bottlenecks in patch creation and deployment need a systemic maturity approach.