Apparently the new security team is using some new tool, probably AI, to probe every repo, every API, and every resource group for anything that they think is a vulnerability. Then every single thing they find is a critical high-severity issue that I’m supposed to fix right now. A month or two ago I was doing project work. Now all I’m doing is upgrading packages, switching around Azure services, and changing database login requirements.
Is it to much to work through during regular work? Is it not planned for and consequently results in additional work?
Apparently the new security team is using some new tool, probably AI, to probe every repo, every API, and every resource group for anything that they think is a vulnerability. Then every single thing they find is a critical high-severity issue that I’m supposed to fix right now. A month or two ago I was doing project work. Now all I’m doing is upgrading packages, switching around Azure services, and changing database login requirements.