two articles that paint a rather grim picture of cybersec.

https://www.netmeister.org/blog/defense-ddos.html
https://blogs.gentoo.org/mgorny/2026/10/27/the-next-circle-of-security-hell/

3 takeaways for me:
- if your org doesn't do risk management and prioritisation, it really should by now
- security is as much of a managerial issue than it is a technical one, and you really need the backing of your decision-makers to be effective
- kernel live-patching might be really worthwhile these days, and i think all the big enterprise distribution (SUSE, RHEL, Ubuntu) have it on offer to varying degrees

#cybersecurity #infosec