Feed on
Posts
Comments

Monthly Archive for June, 2026

In April I predicted a wave of patches over the next two to three years, followed by a lower level than before. Since then, the volume has kept rising, and the AI scanning I wrote about this month is moving into the development pipeline. So let me draw the curve more precisely. Phase one is […]

Read Full Post »

Then and now

In November 2018 I wrote about a pentester who arrived in a long black coat, promised to become domain admin within hours, and came down to the cafeteria after an hour and fifty three minutes to ask for a user account. Forty five minutes later he gave up on that too. It is still one […]

Read Full Post »

At Build this month Microsoft shared more about MDASH, the AI scanning system I wrote about in May. A group of security partners are now part of the preview, and the system has moved from research to the development pipeline. That is the part I find most important. Finding bugs in released code leads to […]

Read Full Post »