* An upstream with no contract, no SLA, and too few reviewers. A fix had been stalled since 2024.
* An embargo that leaked from several sides at once. Exploitation may have started four days before disclosure.
* Inventory that couldn't answer "where does PHP run?"
Leaked secrets that a patch can't take back.
* This week: patch, restart, rotate.
Search
9 results for “jonathancare”
-
-
This year: score upstream health, put embargo conduct in contracts, test your SBOM against a runtime question, and measure how fast you can rotate credentials.
-
Finding flaws is getting cheaper. Fixing them isn't. Most supply chain programs only measure the first.
-
Full analysis below.
-
PHP2Shell didn't break the software supply chain. It went around it.
-
No poisoned package, no hijacked maintainer. A correctly signed, fully attested PHP binary was the vulnerable artifact, so the tooling built after SolarWinds and xz had nothing to catch.
-
What did fail:
-
Victorians can now see a home’s reserve price before auction. What does this mean for buyers and sellers?
By Jonathan Barrett Business editorState’s new transparency laws aim to make property sales fairer in what could be a test case for the rest of the country
#Housing #Victoria #Australianews #Realestate #TheGuardian #JonathanBarrettBusinesseditor
