THE YEAR FINDING AND EXPLOITING BUGS BECAME CHEAP, AND WHAT TO DO ABOUT IT

Summary from the TLDR newsletter

Over the next few years, offensive capability will become abundant. More people will be able to inspect every valuable project and exploit vulnerabilities. Handling critical bugs in a timely manner will become the most challenging and important task for defenders. Having good security infrastructure and integration will be a must. AI-assisted formalization will lower some of the cost, but writing the right specification and connecting proofs to production code will remain challenging.