The BSI report for 2025 (as of October 2025) is out.1 There is not much fundamentally new. Here the key points, with some context: The threat level remains high and stable.2 Misconfiguration of systems and software jumped from 28% in the previous period to 44%.3 Web-facing attack surfaces are in a “concerning state”. Read more

“Ship fast, fail fast”, sometimes shortened to “fail cheap”, is a common mantra in agile environments.1 It addresses real problems with rigid processes, hierarchies, and tech stacks. For years, the industry has promised higher speed through agile methods. That sounds good. Still, when people ask if I work in an agile way, I avoid a straight answer. Read more

For many, AI is the great promise for salvation. More efficiency, more ease, more future. Everyone is talking about it, so it must be true. And so many are jumping on the bandwagon, which, from the external perspective, appears to be a big party.My impression is that the discussion in medium-sized companies tends to focus more on opportunities and less on realities. Read more