This website uses cookies

Read our Privacy policy and Terms of use for more information.

Author’s note: This post is nonpartisan. It’s not about who’s in charge, it’s about what happens when decisions at the top ripple down into your digital life. As Neo said, what matters is what we choose to do about it.

tl;dr: Tech layoffs don’t just hurt employees. They make the tech we rely on less stable, less secure, and a whole lot riskier for everyone else.

The Numbers

The pink slips are piling up. Tech layoffs are everywhere. Business Insider, Financial Express, Fortune, take your pick.

Cybersecurity teams are often the first to go. The C-suite still doesn’t understand what they do, or how much risk they quietly defuse. When cuts come down for the sake of “shareholder value,” critical roles vanish, and the survivors are left duct-taping systems far outside their scope.

The cruel irony: when cybersecurity works perfectly, it looks like nothing’s happening. On a spreadsheet, that reads like wasted money. After all, these teams don’t generate profit, they prevent loss. And to a room full of executives chasing quarterly gains, “nothing bad happened” doesn’t look like success.

Not the cool kids

Let’s be honest: most tech folks didn’t get into this field for the office politics. Many of us are better at debugging code than reading a room. But when layoffs start, “culture fit” suddenly matters more than competence.

Cyber and IT teams often sit outside the company’s social orbit: indispensable but invisible. They don’t headline product launches or charm investors; they just keep the data safe and the chaos contained.

So when the spreadsheets start bleeding red, it’s the quiet ones (the ones who make everything work) who get cut first.

Meme. Top panel: Grizzled man in hangman's noose. Caption "Another 'cost saving' round of cybersecurity layoffs" Bottom Panel: Smug man in hangman's noose. Caption "Security analyst (already updating his resume" "First time?"

The Fallout

When key defense positions go unfilled, unpatched systems pile up. Things seem fine — until suddenly they aren’t.

Just last week, the Congressional Budget Office was hacked, reportedly via a server that had been unpatched for a year. A year. That’s not a “laziness” problem—it’s a “layoffs” problem.

CrowdStrike

In 2024, CrowdStrike accidentally took down 8.5 million systems, the largest outage in internet history. As cybersecurity expert Ian Muir noted, that kind of collapse doesn’t happen in a vacuum. It’s the result of teams stretched thin, knowledge lost, and oversight sacrificed in the name of efficiency.

This LinkedIn post reads: lan Muir July 19, 2024 • OK, I will answer here in a group since a lot of non tech friends have asked me. Lots of stuff broke today because a company called Crowdstrike released a bad piece of software that a lot of systems rely on. Here are some answers to common questions people have asked me. Edit: One note for people who think I'm being dramatic here and that this was all just an accident. This whole thing happened before at a smaller scale with McAffee in 2010. The CTO of McAffee at the time was Crowdstrike's current CEO. This isn't a coincidence, it's a pattern. Why wasn't the update tested better? Because tech people are expensive and Crowdstrike laid a bunch of them off over last 2 years to save money including testers. Testing is expensive and it's hard to convince a business leader that testing is important because it doesn't "make them money". Why didn't big tech companies have a way to function without this one piece of software? Because tech people are expensive and big tech comapnies laid a bunch of them off over last 2 years to save money including the people who help make things stable and flexible. Flexibility is expensive and it's hard to convince a business leader that flexibility is important because it doesn't "make them money". Why didn't airlines, governments, telecom companies, and other business have a backup plan? Because tech people are expensive and many companies laid a bunch of them off over last 2 years to save money including the people who research and implement backup plans. Backup plans are expensive and it's hard to convince a business leader that backup plans are important because they doesn't "make them money". Wait a minute. How many of these critical systems in tech, transportation, government, and infrastructure are short staffed right now? Pretty much all of them. Good luck. Wait a minute, all of these people who laid off all the tech workers said they were replaced by Al. What happened? Al was just a bullshit justification to lay off expensive tech people. Al hasn't really replaced many people in tech because making major changes like shifting to Al is expensive and it's hard to convince a business leader to spend money on making changes when they can just fake it because their compensation is affected more by how many tech people they can lay off than how well the companies actually function. Someday, Al might replace a lot of people in tech, but right now most of the jobs were not replaced by Al and were likely just closed or sent overseas.

AWS

Amazon Web Services, home to a big chunk of the internet, went down, and a week later got blamed for an unrelated Microsoft Azure outage.

The through-line? Both companies laid off deeply experienced engineers and replaced them with AI-driven efficiency models. Quarterly numbers went up. Institutional knowledge went down. Guess which metric the hackers care about.

CISA

Even the Cybersecurity and Infrastructure Security Agency (yes, the people tasked with keeping America’s digital infrastructure secure) has been laying off and relocating staff.

Moving key personnel across the country mid-project breaks teams and destroys long-term continuity. It’s like forcing firefighters to switch stations mid-blaze.

What you can do

Here’s the uncomfortable truth: you can’t fix corporate decision-making. But you can protect yourself from the fallout.

Back up, back up, back up

We covered this in The Cyber Chain Reaction: make sure all your essential files (Social Security statements, banking, insurance, loan documents) exist in at least two places, one local, one encrypted, and preferably printed.

Choose bootstrapped software

Venture-funded apps live and die by growth charts. Bootstrapped companies like Readwise (a favorite here at CybersecuriTea) prioritize longevity and product integrity over quarterly goals. Translation: they’re less likely to implode, or leak your data, when the market sneezes.

Connect the dots

When you see a headline about layoffs at a major tech company, treat it like a weather alert. Reduce your dependency on that platform or service.

And if you’ve got a 401(k), remember: some of that profit-driven pressure comes from us. When we demand better quarterly returns, companies meet that demand by cutting people who keep systems safe.

As Neo also said: “I don’t know the future. I came here to tell you how this is going to begin.”

Understanding the pattern is the first step toward breaking it.

Join us for tea!

CybersecuriTea is a free, plain-English guide to digital safety, designed for families, friends, and the folks you love. Subscribe today and get weekly tips to help keep your digital life secure.

Or, if you’d like to support our work and keep the kettle warm for everyone:

This content may contain affiliate links. If you choose to sign up or make a purchase through them, we may earn a small commission, at no additional cost to you. Thank you for supporting CybersecuriTea.