معلومات عن هذه الحلقة
Interview with Casey Ellis
Our focus for this interview with Casey Ellis are the massive changes in:
- Vulnerability Discovery
- Vulnerability Disclosure
- Exploitation and Remediation
The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, and defenders need to do to ensure 2027 isn't a total train wreck?
Vibe CheckThis week's vibe check explores the question, which security project always takes twice as long as planned?
- 55% - Enforcing data classification
- 18% - SOAR automation buildout
- 9% - Rolling out SSO
- 9% - Moving to passwordless auth
- 9% - AI agent discovery
- 0% - Other
Finally, in the enterprise security news,
- funding and M&A
- PHP2Shell update
- floods of bugs
- silent train
- breaches
- the script kiddy bar has been lowered
- the basics continue to be important
- an AI lab pulls a PR stunt
- an old squirrel story was a scam!
All that and more, on this episode of Enterprise Security Weekly.
Visit https://www.securityweekly.com/esw for all the latest episodes!
Show Notes: https://securityweekly.com/esw-483
الإنجليزية
الولايات المتحدة
النص 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
البحث في الحلقات الماضية
البحث في الحلقات السابقة من Security Weekly Podcast Network (Audio).
حلقات أخرى في هذا البودكاست
As the prevalence of AI continues to grow, more and more people are worried about their online safety. New scams seem to be popping up every day, packaged in creative and terrifying ways. How do you protect yourself?
Frank Riccardi, Author of CTRL+ALT+PWN: The Hacker’s Playbook (And How to Beat It…
Patrick Stewart, Videostrong, C3RB3R, GitLab, VMware, BTCPay, Binance, Aaran Leyland, and More, on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-630
In the security news this week:
In the security news this week:
Cisco says patch faster, then sells you time
Turning AI refusals into vulnerability signals
Brotli’s are hiding
WordPress image upload exploit
Fortinet ships fixes before details
PHP2Shell still claiming victims, including fir…
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…
إخلاء المسؤولية: البودكاست والأعمال الفنية المضمنة في هذه الصفحة مأخوذة من Security Weekly Productions، وهي مملوكة لمالكها وليست تابعة لشركة Listen Notes, Inc أو معتمدة منها.
تعديل
شكراً على مساعدتنا في الحفاظ على قاعدة بيانات البودكاست مُحدَّثة.