[BREACH] VS Code extensions are now part of the supply chain

The plugin had keys. A VS Code extension sat beside repos, tokens, terminals, and AI configs. That is not just productivity. That is inherited access.

[FORECAST] Device-Bound Sessions Are Coming. Defaults Are the Hard Part.

“Secure by default” sounds great until it meets BYOD, VDI, federated SSO, and the help desk exception list from hell.

Device-bound sessions help.

Waiting for every SaaS vendor to flip the default is not a strategy.