News for hackers. Stuff that matters.

Ask HN: How are you protecting your apps and infra after recent vulnerabilities?

Recently, there has been a rise in major security incidents, hacks, and zero-day vulnerabilities.

Are you actively doing something to prevent your systems from being exploited, and how are you ensuring you haven't already suffered a data breach?

To be honest, I'm scrambling my head thinking about all the possibilities, and it's making me a bit anxious.

( 2 comments | on HN )
Re:Ask HN: How are you protecting your apps and infra after ... by turtleyacht on Tuesday November 03, 2026 @02:23AM (#50349074)
Patching
Re:Ask HN: How are you protecting your apps and infra after ... by gosen on Tuesday November 03, 2026 @03:17AM (#50349403)
I don't think anything unique should be done now, solutions are the same as always: keep your infra and software up-to-date. Configure dependabot or similar, make updates weekly, enforce 2FA everywhere, instruct the team to be more responsible, make backups (and probably backups of backups) and be consistent in all these boring chores.

I still believe that majority of recent incidents were related to human factor, all these "we'll update it somewhere next sprint or next year" kind of people sitting on Python 2.7 / PHP 7 just paid for their irresponsibility.