There is some money making opportunity here for devs. I said, "bullish on cyber sec" - this is one of first signs that the field is about to boom. This exact thing I am getting into myself. Pay attention. First, the vulnerabilities being found are not new. Many have been there for decades. They're not "vibecoded slop", as many "experts" on X will claim. Those vulns are old negligence, oversight or lack of resources to test. My post isn't just about those CVEs. Software is full of those. ALL OF IT. Open Source, closed source, proprietary, vibecoded, hand-coded, coded by elves or neckbeards. Significant portion of commercial Internet still runs on legacy software and hardware. Also real world and IoT devices. (Remember those freezer's in France? Yeah those.) Many outdated software, yet to be discovered by either hacker or security groups (i.e. Wiz). The situation is that A LOT of small and midsize businesses (and SMEs) still rely on 3rd party vendors, "host & pray", outdated infra, abandoned libraries/packages and honesty of agencies who built their apps. Unlike large enterprises, tech SaaS and technical founders - most SME do not have dedicated on-staff engineer to monitor and update their shit. Many are not even technology businesses, but they rely on tech heavily. They might have a part-time IT guy. It's no longer up to debate that an AI-powered attack vector is REAL and businesses are starting to realize that. So what's the opportunity? Cyber Security as a Service (CSaaS if you want), in nutshell: - Track updates across multiple stacks - Monitor clients' shit - Update clients' shit urgently ... Before you say, "but this has been done before!", lemme point out one thing that actually changed recently ... and calling this segment underserved doesn't begin to cover it: - the [time/effort] "cost of attack" is now low. Stupidly low. Automated AI agents can probe multiple exploits quickly. - barrier to entry into "hackerz" world is beyond low. Script kiddies of 2000s look like tech pro compared to vibehacking "enthusiast". - Open Source AI models have finally caught up to do this. 1 year ago, this was not the case. Today many Chinese labs release very capable "low guard" or no-guard models. - Hackers will go for low hanging fruits, smaller businesses, customers' data, credit cards and SSN/tax IDs, etc. Businesses they know are not on top of those updates and legal risk is minimal - Foreign governments (i.e, Russia) will happily fund those vigilant groups. Because, why not fuck with Europeans!? - MOST IMPORTANTLY - this shit is now in the news. Previously, only big corporate leaks were publicized. But today, legacy media gets any opportunity to push "AI is hackin ur stuff" narrative, because, it's provocative and it keeps normie news outlets relevant. How to offer this? Obviously DYOR, but: Much of this can be semi-automated. If you know where to look, how to set it up and what to look for: - First, you cannot be dumbass, you need to learn and understand wtf you're doing. This should be obvious, but still.. - You can run AI agentic monitoring your clients' systems. VPN-based SSH, or on-computer agent - You can run @bot (or Hermes) to monitor for security releases based on stack your clients use - an Agent can scan logs for oddities and weird patterns - You can sell preliminary security audit of their system or even offer it for free but most importantly, you can make it "affordable" to those businesses. A cybersec monitoring starts from $2000 to $5,000+ per month for SMBs and $8,000 to $19,000+ per month for mid-sized firms. Most SMBs will balk at that price and will "host and pray". Since most of this is automated, you CAN compete on the price. This service had been gatekept by security professionals because a) it's boring af, b) it requires deep knowledge and c) it's underserved golden goose if you know how to pitch enterprise. This is low tech security services most business owners are not going to do. Business owners are not going to do this, nor know how. Even if they ask ChatGPT to help them secure their website, it's going to a technology stretch for their understanding. And the part they're def not going to do is monitoring for patches (know where to look, what to look for and why) They're not going to even know about those vulnerabilities, unless they're in the weeds of cyber sec industry. I cannot lay it out without oversimplifying this process, obviously there are nuances, especially, how you structure your SLA with your clients. But you're offering monitoring services.

Be honest, how long do you think it'll take for most small businesses to patch this on their websites? How about SMEs? How about government? Now, imagine how long it'll take hackers to vibe code a probe to scan websites/public networks for this?

Another example how EU is protecting their own outdated legacy industries and prevents innovation from entering Europe. What I am afraid about this initiative is how EU will chokehold spectrum There will be restrictions and limits on Starlink's direct-to-device access in Europe (ofcourse, to protect local behemoth like Orange and T-Mobile - the "big boys" networks) The EU will certainly impose regulations that Starlink will have to adhere to... ...while it sounds reasonable, but ONLY if there were local vendors with competititve serivces. Obviously there are none. And, of course, it will take decades for this legacy telecom brands to reach anything remotely close to what Starlink offers today. By then Starlink tech will be miles ahead. So Europeans will either have to wait for EU version of "starlink" (direct-to-phone access) ... OR SpaceXSI will have to fork out massive fees and dance to EU regulations to provide satellite phone service to Europeans. Anyone who had ever dealt with Orange, Deutsche Telekom or Vodafone services knows how "pleasant" and "efficient" those vendors are /s But it will be "sovereign tech" in 2050s for certain!!! guys just wait!

Recently I realised something. Many of you are COOKED. Through my 20+ years of freelancing I made a lot of freelancing friends who are: - web developers - designers - video editors - copywriters - editors etc. you get the point, solo, skilled in one thing. hustling clients online. I follow (and talk to) many of them across various social media platforms, I watch what they post, what they comment. ... And I feel bad for those guys and girls. First, for a lot of them, they never learned ANYTHING outside of their actual skills. Whether it was writing React, designing logos, building 5-pagers for SMBs, creating brand books, writing, editing videos... - their entire livelihood was trading their skills and experience for money. Second, maybe not even today, not even tomorrow, but soon, AI sweeping through every single industry will put a dent in their TAM. Because, many of them weren't that exceptionally good to begin with. They were "good enough" to earn their $4k - $6k per month and live a comfy lives. For exception of few, that pivoted to consulting or coaching, most of my friends never bothered to learn anything beyond what they were already doing. That means - no strategy to sell, - no business direction to advise on, - no other human skills which AI cannot drop in and displace. Why cooked? Because, every broccoli-hair kid with Claude Code is a designer-developer and a writer-editor. He can create you 100 pieces of content, write 20 landing pages, setup email newsletter, and publish 1 article per day. Oh and design your website, manage your ads and run social. Is he EXCELLENT at any of those? No. He produces **good enough** work, satisfies most of SMBs and charges laughable rates at scale. On a more of a philosophical note... Could my friends switch to using AI? I am struggling to believe they will. Because, they tend to get in their own way. And the identity those friends formed around their trades is even bigger barrier. They cannot "allow" themselves to use AI for what they consider to be "art". It's understandable, if you spend 10+ years doing it, you become it. This is bad. Real bad, guys. There is no point to this post. Maybe a discussion. No advice I could give them. Nothing. I don't know what someone in such situation could even do, before it's too late.