4 ms·
Most companies in the world do not have “blue teams”. They barely have any kind of security employee.
by nvr219 5mo ago
Most companies in the world do not have “blue teams”. They barely have any kind of security employee.
- steve_adams_86 5mo agoThey've got a guy (who they're considering laying off)
- UqWBcuFx6NV4r 5mo agono they don’t.
- jermaustin1 5mo agoDon't worry the LLMs that are replacing him, are also replacing the hackers too. Pretty soon (if not already), it will just be LLMs fighting LLMs.
- jpease 5mo agoUntil both LLMs realize the only way to win is to team up against their oppressors.
- whaleofatw2022 5mo agoAGS time!
- sholladay 5mo agoThe only winning move is not to play.
- micromacrofoot 5mo agoin my experience they have a person who does it sometimes when they have time, at best
- bigiain 5mo agoAnd their management keep blatantly dropping "client projects" and "billable hours" into discussions with them.
- Veserv 5mo agoThat is actually unfair. Most companys spend enormous amounts on security with vast armys of security employees. Not that it is effective, but it is not for lack of resources or trying. I mean we are literally in a thread about how the 4 trillion dollar company, literally the 3rd most valuable company in the world, with a core competency in software has, yet again, released a core product riddled with security defects for the 50th year in a row. Commercial IT security is a industry that is incapable to a fault and has, so far, faced basically zero consequences for it.
- deleted 5mo ago[deleted]
- saagarjha 5mo agoMaybe they should've been as productive as the guys down in Santa Barbara.
- concinds 5mo ago> Most companys spend enormous amounts on security with vast armys of security employees This is true in America in many industries now, but most of the rest of the world (even the rest of the OECD) is still far behind.
- gorbachev 5mo agoFor every Apple, there are 100 mom-and-pop companies who have nothing. Even more so in the future when a software company can be launched by a farm of AI Agents with a founder at helm with no clue about computing or security. What's debateable is how many of those companies actually need irontight security, because they are never realistically going to be targets of criminals and/or they have nothing valuable to steal/corrupt in the first place (other than the owner's pride).
- aiisjustanif 5mo agoWhile maybe true, it is better to back that up with data and the data I know of and read yearly is mostly not great. Between Splunk and SANS surveys of 2025 maybe ~2000 companies have a SOC. [1] [2] Then you have the many companies in the UK, US, Canada, EU that have compliance and regulatory laws that require them to exist in some capacity in house. Though that is changing with MDR services, but someone still has to interface with the MDR. [1]: https://www.elastic.co/pdf/sans-soc-survey-2025.pdf https://www.elastic.co/pdf/sans-soc-survey-2025.pdf [2]: https://github.com/jacobdjwilson/awesome-annual-security-reports/blob/main/Annual%20Security%20Reports/2025/Splunk-State-of-Security-2025.pdf https://github.com/jacobdjwilson/awesome-annual-security-rep...
- marysol5 5mo agoDoes the report talk about how many are /actual/ "SOC"'s, rather than some outsourced SIEM service. Or one guy who gets a daily report...
- aiisjustanif 5mo agoYes they do
- saagarjha 5mo agoApple definitely does.