Who Decides What Correct Looks Like?
Four stories crossed my desk this week. A hypervisor bug rated 2.7 that attackers used as a zero-day. A critical flaw in the management layer of the private cloud, with a workaround and no patch yet. An SSH default that turned a "key-only" assumption into an open door on one Linux distribution. And a vendor announcement about tools that detect configuration drift and roll it back automatically. On the surface they have nothing in common. Honestly, they are the same story told four times: none...
