Our view
From the editor’s desk
A back issue for October 22, the week the internet's plumbing sprang several leaks at once. If you installed anything on the 21st, rotate your keys before you read the business pages.
From the Stacksessays worth rereading
An introduction to approachable threat modeling
Kevin Riggle's guide to asking who might attack you, and how, reads differently on a day when a trusted Python package and a hosting platform both leaked secrets. Threat models that stop at your own code miss the release pipeline and the vendor holding your keys.
IncrementContainers in the keep
Liz Rice's essay on defence in depth for container security is a useful primer now that the same kernel isolation underpins agent sandboxes like NVIDIA's OpenShell. Read it before deciding how much to trust a process you did not write, and pair it with today's Docker is weird.
Increment