Four Failures, One Excuse: "Patch Faster" Was Never the Answer
The exploit window did collapse this spring. The bugs that walked through it were decades-old design failures, not clever exploits -- and the industry is still selling speed.

The exploit window did collapse this spring. The bugs that walked through it were decades-old design failures, not clever exploits -- and the industry is still selling speed.

CVE-2026-49975 will be patched in weeks. The condition that produced it won't be.

What GitHub's move to usage-based billing actually exposes about agentic coding, and where the honest economics end and the squeeze begins.
