The publication is built around one question: what changed, and does a security engineer need to care?