I have a few pieces of cybersecurity advice for anyone willing to listen: Reduce the number of vendors your core security depends on. Expect lots of small, medium-sized, and even some large security / services companies to get compromised in the next year or so, if they aren't already. Put most of your trust in the absolute top tier of companies in terms of security and engineering. These are companies like Google, Apple, and (I would argue) Cloudflare. A good heuristic is how big and talented their security teams, and how much money their company invests in security. If there is a security issue in Chrome, or iOS, for example, you can be damn sure that hundreds or thousands of the smartest people in the world are working to fix it. And these companies would be willing and/or happy to spend tens of millions of dollars instantly to solve the issue. I'm not going to name companies, but there are many applications and services out there for managing keys, passwords, source code, secrets, etc., where the security teams are decent, but they're basically large startups. The security teams are far more varied in talent levels and budget levels. Basically we're about to be hit with a tidal wave (or global forest fire, pick your metaphor) of both advanced and persistent attacks with existing vulnerabilities, as well as lots of completely new attacks nobody's seen before. You want to have your personal and company security relying on as few of these small to medium sized companies as possible. Not because they're totally incompetent, but because many of them are likely not up to the challenge of defending against millions of agents running open source attack models and harnesses. Look at your whole security tech stack. See where you can reduce dependency on small-to-medium sized Jenga blocks that have a high chance of getting compromised during this storm. And remember, it's not just that the teams and budgets aren't as big as companies like Google and Apple. It's also the fact that these companies (like password managers, for example) are so damn attractive. Millions of users and their passwords. These are not good places to have credentials right now. Or data. Or infrastructure. This is not an absolute thing. I'm not saying cancel all engagements and get our of all small companies or whatever. Or that the big ones will be perfect either. I'm saying, as a general truth, on the whole, moving in this direction is likely to make you more secure while this thing hits us.