SEASON 2 · 1/10 – 8/12 2026

Security Autumn

Published

03

Texts

20

Ends

8.12

Rhythm

TUE/THU

Laid over European Cybersecurity Month: twenty pieces on the risk we like to call debt — from the API key exposed for three years to threat modeling for teams that have never done it.

Next — Tuesday, October 13, 2026

‘It’s just an internal system’ – the sentence that takes down the most teams

LATEST

400 Dependabot alerts. Where do you start?

An example with 400 alerts: assess exploitation, exposure and impact to find what needs urgent action and give the rest a reasoned plan.

S2Nº 03

Security findings need more than a debt label

Security findings need an assessment of exposure and impact, an owner and a deadline. The label ‘technical debt’ doesn’t give us that assessment.

S2Nº 02

The developer profession in 2035: What disappears, what endures

Every wave of technology has predicted the death of the developer, and every time the profession has grown instead, with different work inside it. This time the change runs deeper: it isn’t the tools being swapped out, it’s the raw material. Something really does disappear, something endures, and something is worth more than it has ever been.

FFNº 01

The archive →

START HERE