In the last ~72 hours alone, about 80% of the web is prone to critical hacks:
– PHP2Shell, an unauthenticated PHP RCE
– A Node.js brotli RCE
– Out-of-band nginx fixes from F5
– UpdraftCentral dashboard keys stolen
– Railway’s environment-variable breach
– LiteLLM compromised on PyPI, again
– A CVSS 10 GitLab advisory
– GoDaddy’s mass certificate revocation and the eMudhra CA distrust
– Vulnerable plugins
Agents and people and hosts have been patching all week here, running tirelessly to close doors, rotate tokens, set limits, and do whatever is needed to keep the systems afloat and safe.
In both college and university, we kept hearing that 20% of the engineering time goes into building and 80% into maintaining.
This was 20+ years ago.
With vibe coding today, it looks like 98% one-shotting in 30 minutes, and then zero maintenance going forward. Let alone the fact that very few people know what stack they run on.
Is your tech infrastructure safe this week?
