Insights
Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.
Curated links from external sources — not 360Softy original articles.
Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover complex software vulnerabilities. The company explains how the system found and exploited a previously unknown WordPress plugin zero-day, with additional discoveries already under responsible disclosure. [...]
Performance defects in Pega rarely present as a single, obvious fault. A slow harness render, an unexpected stage transition, a case that opens correctly but saves slowly, or a data page that intermittently returns stale values can all originate in very different layers of the runtime. Effective diagnosis depends on separating timing, execution flow, and in-memory state instead of treating them as one problem. That distinction is exactly why PAL, Tracer, and Clipboard remain the most practical d
Written by: Corné de Jong Introduction Mandiant security assessments frequently identify publicly exposed serverless applications that lack authentication, often as a result of specific business requirements. Serverless deployments typically run custom-developed code that incorporates third-party packages, making them targets for a wide range of application-level attacks, including: Local and Remote File Inclusion (LFI/RFI) Command Injection Successful exploitation of these vulnerabilities ca
Comments
Comments
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below - CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719, a site isolation in the DOM: Navigation component "We are aware that exploit code for this is public, however we are not aware of
Anthropic-backed Ode launches as AI labs bet that embedding forward-deployed engineers inside enterprises is the key to accelerating enterprise AI adoption.
There is a number that engineering organizations love to report, and that engineering leaders love to receive: 100% code coverage. It has the satisfying quality of completeness. But completeness of what exactly? It implies that every line has been tested, every branch examined, every condition verified. It looks like the mathematical proof of a job well done. It is not, however. And the gap between what that number promises and what it delivers is, in many organizations, the single most expensiv
Work with 360Softy
Book a free consultation and we will tell you honestly whether we can help.
