"that was simply a matter of upgrading a dependency."
... Across a global infrastructure. ... And finding out if, where you have been compromised. ...And fixing all those systems that was found to have been compromised. ...And handling media questions, PR related to the issue and your organization.
Just saying it was "simply a matter of upgrading a dependency." is so amazingly far from what such an event requires. Even if you wasn't actually affected in a technical sense.
... Across a global infrastructure. ... And finding out if, where you have been compromised. ...And fixing all those systems that was found to have been compromised. ...And handling media questions, PR related to the issue and your organization.
Just saying it was "simply a matter of upgrading a dependency." is so amazingly far from what such an event requires. Even if you wasn't actually affected in a technical sense.