From my perspective all I saw today with the Cruise layoffs is that their self-driving tech is going to be very insecure.
They laid off a heck of a lot of good security folks, but my gods, who gets rid of Mubix?
Hooboy, if I put that together looking at *my* feed, y'all know adversaries are. With any org that publicly lays off most of their experienced cybersecurity folks. Optics are ouch.
And in a way, so much of it is optics. Even if they do retain a very good security workforce, competitors and worse are going to be poking at them quite a bit.
If you're a leader and -god forbid- you have to lay off staff over the next year, if you are getting rid of much of your senior security staff, keep in mind how that's going to look via a social media and professional community that is shared with the people trying to hack you.
It's like laying off all your security guards or financial auditors, and announcing that to the world the next day. This is why quiet, facilitated transitions with severance and assistance are important.
Doubly so if you're working on tech that is a high value target for aggressive competitors.
You super-hyped AyPeeTees and crimeware actors that you read about in fancy incident reports are *reading this thread right now*.
