惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Martin Fowler
Martin Fowler
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
A
About on SuperTechFans
Apple Machine Learning Research
Apple Machine Learning Research
The Register - Security
The Register - Security
Vercel News
Vercel News
H
Hackread – Cybersecurity News, Data Breaches, AI and More
人人都是产品经理
人人都是产品经理
MyScale Blog
MyScale Blog
云风的 BLOG
云风的 BLOG
博客园_首页
U
Unit 42
T
Tailwind CSS Blog
G
GRAHAM CLULEY
F
Full Disclosure
V
Vulnerabilities – Threatpost
T
Tenable Blog
月光博客
月光博客
P
Privacy & Cybersecurity Law Blog
P
Privacy International News Feed
K
Kaspersky official blog
Scott Helme
Scott Helme
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
N
News and Events Feed by Topic
T
The Exploit Database - CXSecurity.com
N
News and Events Feed by Topic
有赞技术团队
有赞技术团队
Recent Commits to openclaw:main
Recent Commits to openclaw:main
L
LINUX DO - 最新话题
Recorded Future
Recorded Future
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Help Net Security
Help Net Security
The GitHub Blog
The GitHub Blog
Cisco Talos Blog
Cisco Talos Blog
SecWiki News
SecWiki News
P
Proofpoint News Feed
Security Latest
Security Latest
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
罗磊的独立博客
S
Security Affairs
M
MIT News - Artificial intelligence
L
LINUX DO - 热门话题
美团技术团队
Simon Willison's Weblog
Simon Willison's Weblog
T
Threat Research - Cisco Blogs
Stack Overflow Blog
Stack Overflow Blog
Forbes - Security
Forbes - Security
Hugging Face - Blog
Hugging Face - Blog
博客园 - Franky
V
Visual Studio Blog

Latest from TechRadar in Security

Robots are fighting wars and helping to quash riots — China is arming riot police with squads of AI controlled drones and Ukraine wants to man the frontlines with 25,000 robots US security agency still using Mythos despite ban – government using new security tool despite Pentagon's… Struggling to launch Teams? Microsoft recalls update causing failed startup and infinite loading loops –… How to meaningfully measure the effectiveness of cyber resilience 'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale… How EU organizations can turn sovereign cloud theory into action 'Update immediately': 60,000 WordPress websites at risk after experts discover flaw that allows hackers to… 'They mopped the floor with me and pulled every childish game they could': Disgruntled researcher releases second major Windows zero-day — claims Microsoft 'would ruin my life, and they did' 'As threats evolve, Gemini keeps our defenses one step ahead': Google claims its AI helped it block over 8.3… Cisco tells Webex users to patch critical security flaws immediately, as experts find its Wi-Fi boxes may be filling their disks with undeletable data every day Microsoft experts warn North Korean attackers target macOS users with 'a highly reliable infection chain' to steal passwords, financial data and more — here's how to stay safe Solving the shadow IT crisis in travel Agentic swarms will change how everyone uses AI – but how can organizations deploy them securely? Europol launches Operation PowerOFF — warns 75,000 DDoS users and takes down 53 domains China completes testing on ‘deep-sea electro-hydrostatic actuator’ capable of slicing undersea cables as deep as 3.5 kilometers – new compact subsea vessel testing bridges the ‘last mile’ and could deploy in 2026 Many are still leaving the door open': Security experts warn FIFA World Cup partners could be putting customers at… 'Anyone with $10 could have walked straight through': Report warns this legit-looking software is actually… An ancient Microsoft Excel security flaw could let hackers hijack your entire system, so patch now 'This is not a traditional coding error': Experts flag potentially critical security issues at the heart of Anthropic's MCP, exposes 150 million downloads and thousands of servers to complete takeover Your OpenClaw agents can empty your inbox and leak your data. Here's how to secure them Russia hits European thermal power plant in attempted ‘destructive’ cyberattack – Pro-Kremlin hackers are engaging in ‘riskier and more reckless behavior’ in latest attempt to cripple Western critical infrastructure The war in Iran is reaching cyberspace - here’s how to prepare Millions of hotel goers may have been exposed after hackers steal data and leak it on Telegram 'Every Apple user needs to know about this nasty scam': Fake warnings tell users their iCloud data will be… Dozens of WordPress plugins hijacked to target thousands of sites 'We are currently being extorted' — crypto giant Kraken says it is facing extortion attack, here's… McGraw Hill becomes latest to see its Salesforce data hacked Over 100 Chrome Web Store extensions found stealing user data from thousands of accounts OpenAI reveals its Mythos rival designed for cybersecurity pros When cyberattacks are inevitable, recovery becomes the strategy Closing the cloud complexity gap 'It's more common than you think': Experts reveal how hackers are trying to hijack your inbox with these… 'This wasn’t just phishing — it was a full-service cybercrime platform': FBI reveals takedown of notorious W3LL phishing operation targeting thousands of victims From cloud to Agentic AI: Why security must evolve faster than innovation Basic-Fit gym group data breach exposes details of over 1 million members — here's what we know ‘Authorities can ask them to hand over data’: Report claims over 80% of Europeans don’t trust US and Chinese businesses to handle their data – Europe is desperate for homegrown AI, cloud, and telecoms as the rift with the US grows Booking.com confirms reservation data breach — tells customers hackers 'may have been able to access certain… Agility is the key to protecting against Malware-as-a-Service (MaaS) Rockstar hackers publish 78.6 million stolen records — but many of us will be disappointed Adobe issues emergency security patch — Reader and Acrobat users need to update now What 2025 taught us about the importance of resilience in retail Governing the hidden risks of generative AI in the enterprise Russia launched a covert operation to deploy undersea sabotage vessels in UK waters while the world was distracted by the Middle East - UK threatens Putin with ‘serious consequences’ if subversion continues 'Industrial-scale scam operations': Global criminal organization operated slave compounds in Asia behind huge malware-as-a-service hydra targeting 35+ government agencies monthly OpenAI flags third-party data issue — all macOS users should update now Hackers use Claude and ChatGPT in 'a significant evolution in offensive capability' to breach government agencies, leak hundreds of millions of citizen records 'This is not your typical run-of-the-mill malware': CPUID download page hacked and tools replaced with links… How businesses can turn AI pilots into scalable solutions ‘No Decision’ is the new breach: Why inaction is becoming a career risk for CISOs in 2026 Rockstar confirms major third-party data breach: GTA VI maker says 'no impact on our organization or our… '$15K bill destroyed a solo developer’s startup': How hackers are using leaked Google API keys to… Adobe Reader users beware — experts flag months-old security flaw using booby-trapped PDFs to scope out victims Top WordPress Slider plugin hijacked to spread malware — here's what to look out for No, Elon Musk doesn't want to give you a $5,000 tax refund — it's a scam, here's what to look out… ‘It’s a potential national security threat’: Proton study finds over 3,500 US legislators’ official emails leaked and exposed on the dark web Microsoft warns worrying security flaw exposed over 50 million Android users, says 'user credentials and financial… Google Chrome rolls out a new tool to try and stop infostealer malware in its tracks Breach exposes sensitive LAPD files stored in city attorney system ‘FlamingChina’ hacker claims to have stolen over 10 petabytes of advanced military data from China’s National Supercomputing Center in possibly the biggest hack of all time Mac users beware — experts say this attack 'stood out immediately' by making a major change to try… Now that's different - hackers use miniature SVG images to try and hide credit card stealer Closing the implementation gap in America's cyber strategy UK NHS chief champions Palantir’s 'outstanding results’ in England, pushes for deeper rollout despite… French email provider accidentally leaked 40 million records — L’Oreal, Renault, French government data… Tame your AI gremlins before the chaos becomes permanent NHS Scotland domains reportedly found serving adult content and illegal sport streams 'This creates a layered form of obfuscation': New report says criminals are using emojis to avoid detection Top open source AI platform Flowise hit by maximum-level security issue US agencies warn Iranian hackers are targeting American critical infrastructure — causing 'disruptive effects… Third-party integration tool Anodot data breach hits Snowflake customers Always-on AI Agents put everything hackers could ever want behind a single attack surface When infrastructure decisions shape growth outcomes 'This puts organizations at risk of credential theft, data manipulation and broader compromise': UK government, Microsoft warn Russian hackers are hitting TP-Link home routers to hijack internet traffic 'A new frontier model trained by Anthropic that we believe could reshape cybersecurity': Project Glasswing wants to use AI to prevent AI cyberattacks — but will 'overeager' Claude Mythos do more damage than help? Microsoft flags China-based hackers using vicious new 'rapid attack' zero-days to launch ransomware at targets… 'By combining trusted platforms with legitimate tools, the threat actor reduces visibility and increases the… 'Stolen session cookies render MFA irrelevant': How $900-per-month turnkey malware is putting enterprise-grade… 'Verify before you act': security expert reveals the simple steps you can take to stay safe from deepfakes I can't think of anything that's off limits to them': FBI slams cybercriminals for attacking schools,… 'I was not bluffing Microsoft, and I'm doing it again': apparently disgruntled researcher leaks worrying… Understanding the ‘espionage ecosystem’ threat Goodnight REvil and GandCrab? Police think they've identified two of the biggest cybercrime bosses around Why modern cyber conflict is partly a global skills challenge 'Your login credentials may already be slipping into the hands of a cybercriminal': Hackers target LinkedIn… SparkCat malware returns to target Android and iOS users, hiding in innocent apps to try and steal your details One of the largest corporate espionage and data breach scandals in digital history': New "BrowserGate" report claims LinkedIn secretly scans user browsers for installed extensions and collects device data This devious VENOM phishing campaign targets business executives by name — so watch what you click on Backups won’t save you from this version of ransomware Your marketing stack is an attack surface – is security watching? AI agents can only be trusted as Junior Engineers Top museums hit by apparent cyberattack on Vivaticket — Louvre and other institutions affected Uffizi galleries confirms it was hit by cyberattack — but claims nothing was stolen Time for an upgrade? Report warns outdated operating systems could be the 'unnecessary risk' your business… Building private AI: control, compliance and competitive edge 'Skipping a beat on resilience investment isn’t an option any more': IT incidents can cost firms huge amounts - here's how to stay on top of issues 'The most powerful weapon is not always a missile': How Iranian "Charming Kitten" hackers used old… 'Growing 3x faster than police staffing': Surge in cybercrime and new laws on ransomware payment could put UK… The invisible threat hidden in clear view: how Unicode characters are being weaponized to hide malicious commands from… Be careful what you click - hackers use Claude Code leak to push malware Hims and Hers reveal cyberattack — customer support system hacked and personal info stolen, here's what we…
The rising cost of technical debt in IT service management
Ron Browning · 2026-05-01 · via Latest from TechRadar in Security

Over the past decade, IT service management platforms have emerged as mission-critical tools that power service delivery for IT organizations and beyond.

Many platforms, along with evolving customer needs, are expanding into other shared service areas such as HR, Finance, CRM, and Facilities.

Article continues below

CEO and Co-Founder of Dyna Software.

However, when organizations move quickly to meet business demands and expand into broader use cases without proper governance and architectural controls, they can introduce technical debt that makes it more difficult and expensive to innovate on their platform.

This tends to be true across most, if not all, service management platforms, including ServiceNow, Freshworks, Ivanti Neurons for ITSM, and others.

Contributing to technical debt

There are several factors that contribute to technical debt, and one of the most important things to understand is that its seeds can be planted long before the platform even goes live.

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

Many organizations begin implementation with years’ worth of assumptions about workflows and system design. In an effort to accelerate time to value, some teams attempt to recreate processes exactly as they exist in legacy systems.

In some cases, this may be appropriate. However, in many cases, it introduces unnecessary complexity and customization. Rather than critically evaluating existing workflows, organizations often reimplement outdated solutions as custom code.

The reasons teams take this approach are less about technical challenges and more about organizational pressure. No one wants to slow down teams that are measured on their ability to deliver business value.

Governance decisions about what should be migrated, redesigned, or retired can be difficult and are often delayed. When platform configuration and development decisions lack proper oversight, teams continue building without a clear understanding of what should be introduced into the environment.

Technical debt can also be introduced after a platform goes into production. While there may be multiple technical approaches to achieving a goal, not all are sustainable over time.

One of the biggest contributors is choosing to build custom code, system rules, or scripts when the same functionality could be achieved through configuration.

The need for ongoing investment

Developing custom code may seem effective initially, as it helps organizations achieve short-term goals. However, it requires ongoing investment to maintain. For example, every custom script, application, or plugin developed in ServiceNow must be continuously analyzed, tested, and validated with each platform upgrade.

As more custom code is introduced, it can significantly extend upgrade timelines and limit the platform’s ability to adopt new capabilities. As a general rule, if an IT service management platform can be configured instead of customized, it should be.

Dependency is another factor that complicates technical debt. Most leading platforms have been refined over many years to support shared components across features and application suites. Modifying core elements of the platform can jeopardize both current and future functionality.

In many cases, even application-specific customizations can create similar risks. The true value of service management platforms lies in their interconnected nature, which enables a unified experience for both end users and the employees responsible for fulfilling requests and resolving issues.

A growing trend in large enterprises is the adoption of distributed or federated development models. In this approach, development resources are decentralized, and different business units are given direct development capabilities.

While this can increase agility, it also significantly raises the risk of technical debt and development conflicts if not governed through a consistent and managed framework.

Over time, technical debt tends to accumulate gradually rather than appearing all at once. For months or even years, systems may appear to function as expected, or issues may seem manageable. Eventually, however, IT management teams responsible for the platform begin to notice that upgrades take longer or that new features are blocked.

As customization increases, both the complexity of upgrades and the effort required to remediate issues grow. This often leads to hesitation in adopting new features, capabilities, or applications, especially when resources are already constrained.

In extreme cases, organizations may be forced to rebuild or re-platform their environments due to the overwhelming complexity caused by technical debt. This is why technical debt is often compared to financial debt. If you do not address it early, it compounds into a much larger problem over time.

Artificial Intelligence Meets Technical Debt

Artificial intelligence is the latest development bringing technical debt into sharper focus. AI has the potential to introduce technical debt at scale, but it can also help reduce it when applied correctly. On one hand, AI can significantly accelerate development and simplify many platform configuration tasks.

Developers can work faster, and processes that once took hours can now be automated. However, if organizations begin deploying AI-generated code or configurations without proper governance or architectural controls, they risk introducing complex dependencies and potential security vulnerabilities.

To prevent this, organizations must implement guardrails. Any form of automated development should be validated against platform best practices, and AI systems should be trained on these standards before deployment. Without these controls, AI may create more problems than it solves.

As more teams gain the ability to build their own workflows and business apps, governance and platform visibility become increasingly critical. Organizations must establish clear architectural standards and implement controls that provide appropriate oversight across the environment.

Without a well-defined governance model, teams may continue introducing quick fixes that solve immediate problems while creating long-term challenges.

Focusing on foundational practices remains essential. Code reviews, architectural governance, structured development processes, and adherence to best practices have helped organizations manage technical debt for decades.

Service management platforms provide organizations with the ability to move quickly and deliver business value. However, moving too fast without the right controls can strain operations and impact long-term performance.

Organizations that succeed understand that technical debt is not something to avoid entirely in the short term. Instead, it must be actively managed over time through strong governance, sound architecture, and disciplined development practices.

We've ranked the best software asset management (SAM) tools.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

CEO and Co-Founder of Dyna Software.