The Crash Override Blog

Hooray! Security Teams May Still Be Accountable for Secure Software, but Developers Are Now Taking Responsibility for It and Here Is Why

Developers are finally taking real responsibility for secure code while security teams shift into trusted advisor roles. Here's why it matters.

By Mark Curphey

June 3, 2025

Featured

How to Uncover Potential Shadow Engineering Situations

By Sean Clarke

April 30, 2025

The Curious Case of Shadow Engineering

By Mark Curphey

April 28, 2025

Code Ownership and Code Owners Files

By Mark Curphey

April 15, 2025

Cyber Industry

RSA 2025: Lost in the Petting Zoo, Searching for Signal

Another RSA Conference has come and gone. Security marketing is having an identity crisis. It is time for a reset.

By Rich Smith

May 7, 2025

Platform Walkthroughs

How-to add code owners files to all of your production repos

How to easily make sure you have code owners files in all of your production repos using the Crash Override platform

By Sean Clarke

April 16, 2025

The Security Industry Needs More "Easy Buttons"

The security industry must prioritize creating streamlined, user-friendly solutions—'easy buttons'—to reduce the complexity and costs for development organizations.

By John Viega

January 14, 2025

Security Marketing Exposed - Part One

Why understanding marketing is a super power for running operational security programs

By Mark Curphey

January 8, 2025

Security

Opengrep - The Security Industry Deserves Better

Opengrep, a fork of Semgrep, raises concerns in open-source security. This blog investigates the motivations behind Opengrep, defends Semgrep’s open-core model, and calls for industry accountability.

By Mark Curphey

January 29, 2025

Are there too many bubbles of similar security efforts?

Why we shouldn't work together for the greater good of the security industry

By Mark Curphey

March 26, 2024

SBOMs for Production Incident Response Maybe a Killer Trojan Use Case for Security

SBOMs are more valuable for platform engineers than they are to security engineers today, and why this will help security in the long run.

By Mark Curphey

November 14, 2023

Build System or Bust and Wrapping Security Tools Using Docker

By Mark Curphey

November 13, 2023

Whack-a-mole is dead

Welcome to the post alerts and issues era, and why security insecticides are a better approach.

By Mark Curphey

November 6, 2024

On Social Media Witch Hunts and Learning Important Lessons

As Jen Easterly from CISA said, ‘this (CRWD saga) is a dress rehearsal for what China could do in the future’ and if we don’t learn the actual lessons here we are doomed to repeat history.

By Mark Curphey

September 10, 2024