The core infrastructure under the web is under attack. Certificate authorities, remote access and email filters have all had critical flaws exposed.
The core infrastructure under the web is under attack, or at the very least at risk. Layers from trust and security certificates down to remote access are being compromised, or having compromises found in them. That puts the way we use the web at risk.
Example one: the certificate authority. That's the system that tells your browser a website is really who it claims to be. Eight critical keys turned out to be guessable. So far, Google, Apple, Microsoft, and Mozilla have all stopped trusting them.
Example two: remote work. Software that lets employees log in from home has had hidden flaws attackers can use to take control. Not just of a user's computer, but of the entire critical stack of infrastructure behind it.
Example three: the email filter. Systems that screen email for entire companies have had flaws found and exposed. These are the systems that protect people inside companies. They keep phishing emails at bay. More than that, they keep emails that carry attacks out of corporate infrastructure.
Between the three, this is the core infrastructure of the internet under threat. Over the next several weeks and months, have some sympathy for the sysadmins. They won't be getting much sleep.
The broader point: AI-enabled code review now finds errors faster than security teams can keep up. The security side is starting to deploy AI patching in parallel.
But here's the asymmetry. Security requires somebody to put it in place. On the hacking side, AI can just reach out and touch you. One requires action. The other works by default. That is what creates the risk across the board, even with a great sysadmin who isn't sleeping.