Tanu singh

Sending this into the universe.

I’m an engineer who loves yapping about products, creating content, and talking to people.
Built community for 4 years. 2 years in DevRel + growth.

If you’re hiring for growth, DevRel, GTM or content , let’s talk.

i spent today reading three things back to back.

a breach report. a thread about companies not hiring juniors. a fight about whether soc 2 means anything.

by evening they'd stopped feeling like three stories.

writing software got cheap. knowing what you shipped got expensive.

here's where i think it goes next.

1. AI keys start getting treated like money

because they are. stolen keys get resold within minutes. one platform's breach ran up ~$740k in stolen usage. a team at atlassian once had to pause new sign-ups just to stop people burning credits.

spending caps, short-lived keys and one identity per agent stop being the advanced setting. they become the default.

2. your vendor's vendor becomes your problem

this week one buyer said they won't approve any vendor that runs on railway for the next year. notion's own systems were fine, and its AI chats still turned up in a breached vendor's dataset.

"who hosts you, and who hosts them?" is about to become the hardest question in a deal.

3. the junior comes back, as the person who reads

new grad hiring is down by more than half since 2019. meanwhile ~38% of AI coding tasks still introduce a known vulnerability.

agents write. someone has to read. the engineers who can go through 40 AI-written files and find the one that leaks will be the scarce ones.

4. the badge stops being enough

soc 2 checks that you follow the controls you wrote. it doesn't check whether they'd stop anyone.

buyers will keep asking for it. then they'll ask for the proof: pen tests, incident history, how fast you can cut off a vendor.

5. every shutdown is a migration, and every migration is a risk

an agent-cloud startup that raised $8m in september just told customers it's closing in january. there'll be more.

each one means teams moving secrets in a hurry. that's usually when keys get copied somewhere and forgotten.

none of this is about hackers getting smarter.

it's about us shipping faster than we can keep track of.

the teams that win the next two years won't be the fastest.

they'll be the ones who know what they shipped.

black october wasn't a hacking spree. it was a supply chain lesson, and most founders haven't read it yet.

what happened in ~4 weeks:
> 9+ AI developer platforms disclosed incidents in october (fireworks on the 6th, northflank on the 30th)
> railway: up to ~100k workspaces exposed, ~$740k burned on stolen keys
> stolen credentials ran ~2.5M calls on bedrock before anyone stopped them
> this week, notion confirmed some AI chat transcripts sat in a dataset at fireworks. notion itself was never breached.

read that last one again. notion's systems were fine. its vendor's weren't.

why now: attackers stopped hunting keys one developer at a time. they went for the platforms holding thousands of customers' keys at once. one break-in, thousands of wallets. and a stolen AI key is cash, resold within minutes, bill lands on you.

my predictions for the next 12 months:

1. the next wave isn't keys. it's data. fine-tuning sets, eval logs, chat transcripts. everything you sent to "just one more AI vendor".

2. every enterprise security review gets a new question: which AI vendors touch our data, what do they keep, and how fast can you cut them off?

3. SSO and audit logs stop being "enterprise tier" for AI infra. buyers will refuse to pay extra to see who touched their data.

startups that can answer #2 on one page will close enterprise deals. the rest will find out in the security review.

we are just getting started.

Been trying to make a video from last 5 days, tried Higgsfield, Cardboard, and every other AI tool on paid plans, still couldn’t get that taste, not giving up on AI yet, gonna prompt more, but after this last try I’ll do it manually for sure :)

Love how this place brings a touch of Karnataka’s culture into this snug little space :)

📍Kahale, Jayanagar