The vulnerabilities I find as a pentester are almost never clever. They are structural, and they trace back to a design decision made in a meeting nobody thought was about security. Security by Design is the least useful phrase in the industry and the most useful practice, and the gap between the two is where the actual work lives. The EU Cyber Resilience Act is about to make that gap expensive.
tag: #sdlc
1 posts