// theme-connected

Source: The Next Web

The Uffizi Gallery's cyberattack exposed a structural vulnerability: cultural institutions treat digital infrastructure as secondary despite housing valuable collections and processing millions of visitor records annually. Museums operate on thin margins with aging IT systems, minimal security staff, and boards prioritizing fundraising over cybersecurity. Ransomware operators exploit this gap deliberately—they know institutions will often pay to avoid public embarrassment or operational shutdown. A successful breach of a museum's ticketing or visitor management system exposes personal data at scale while crippling operations during peak season, forcing a choice between ransom payment and revenue loss.

Source: Filippo

Filippo Valsorda's shift from measured technical caution to declaring "unacceptable risk" is rare—infrastructure experts don't shed hedging language without cause. Google's disclosure that harvest-now-decrypt-later attacks pose immediate damage to long-lived secrets like state keys and identity certificates has compressed what was a 10-15 year migration window into an emergency enterprises can't defer through standard IT planning cycles. The stakes are concrete: authentication systems, encrypted archives, and supply chain integrity. Post-quantum cryptography standards exist but require immediate deployment coordination across browsers, certificate authorities, and hardware infrastructure. Valsorda's call is less technical opinion than market signal that the migration tax is now unavoidable.