Just read some vendor documents suggesting that part of "secure guardrails" is scanning a developer's file on every keystroke...
The team at CISA had really stepped up over the last 4 years to make their guidance relevant - whether it's with KEV or secure by design, I might have nitpicks around methodology but the topics were absolutely the right things to be talking about.
techcrunch.com/2024/11/18/c...