{
  "id": 19445907,
  "title": "Open code, unowned risk: The governance gap in business-critical email",
  "url": "https://urgent.news/2026/11/11/open-code-unowned-risk-the-governance-gap-in-business-critical-email",
  "topic": "business",
  "section": "Business",
  "published": "2026-11-11T04:30:44.000Z",
  "source": {
    "name": "e27",
    "slug": "e27",
    "url": "https://e27.co/governance-gap-in-business-critical-email-20261017-2/"
  },
  "original_language": "en",
  "account": "Business-critical email systems rely on open code, but accountability for maintaining that code is crucial. Open source refers to licensing, while open core describes a commercial model with free core software and commercial editions with support. The distinction matters as open core allows a choice of accountable maintenance. Many email platforms are open core, offering the option of running with or without accountability. The risk accumulates over time when a migration is deferred and upgrades slip behind other priorities. Unpatched end-of-life software amasses new vulnerabilities yearly, making it an easily discoverable risk. Attackers can exploit this within minutes of disclosure, turning it into a published vulnerability. The volume of cybercrime has surged, with cybercrime now accounting for over 30 percent of all recorded crime in more than half of the countries studied. However, vulnerability counts do not necessarily indicate weaker code, as widely deployed platforms attract more scrutiny. The true test of whether an organization is accountable for its email platform is whether they can answer three key questions without convening anyone.",
  "summary": "Few organisations deliberately decide to run unsupported infrastructure. More often, a migration gets deferred, an upgrade slips behind other priorities, and a temporary decision becomes a permanent one. Over time, operational risk accumulates quietly until a vulnerability, outage or audit brings it into view. At that point, the issue is often described as a security […] The post Open code,…",
  "key_points": [
    "Open code used in business-critical email systems",
    "Accountability crucial for maintaining open core software",
    "Unpatched end-of-life software accumulates vulnerabilities yearly"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}