Post

“There’s a tidal wave coming. You can see it. We can all see it. Are you going to lay down and die, or are you going to do something about it?” Be ready to patch your systems, repeatedly, for at least the next 12 months.

This post is unavailable.

Russ Cox

@swtch.com

7 May

The LLM bug hunter comes for us all. Here’s a truly terrible mistake I made seven years ago that somehow went unnoticed by multiple human reviews. Patch your systems! And my apologies. groups.google.com/g/golang-ann...

groups.google.com[security] Go 1.26.3 and Go 1.25.10 are released

Russ Cox

@swtch.com

“Your monthly maintenance window is not a safety margin. It is an attack window.” blog.himanshuanand.com/2026/05/the-...

blog.himanshuanand.comthe 90 day disclosure policy is deadTLDR The 90 day responsible disclosure window was built for a world where bug finders were rare and exploit development was slow. That world is gone. LLMs have compressed both timelines to near-zero. ...

11/5/26, 2:33 am7 reposts20 likes

Josh Bleecher Snyder

@commaok.xyz

11 May

Indeed. But also, bsky.app/profile/comm...

Josh Bleecher Snyder@commaok.xyz

Rapid updates are a software supply chain threat vector. Use cooling off periods. Also, Mythos can go from vuln to working exploit in hours for trivial money and effort. Better patch fast. The call is coming from inside AND outside the house. This is fine.