SOAR, Cody Cornell - Enterprise Security Weekly #127

Mrfoofoospicy, Binance, Polymarket, Ada Lovelace, Silent Train, Robosurance, Privacy Piracy, Josh Marpet, and More on this episode of Security Weekly News. Show Notes: https://securityweekly.com/swn-629

Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…

In the security news this week: In the security news this week: Cisco says patch faster, then sells you time Turning AI refusals into vulnerability signals Brotli's are hiding WordPress image upload exploit Fortinet ships fixes before details PHP2Shell still claiming victims, including fir…

Interview with Casey Ellis Our focus for this interview with Casey Ellis are the massive changes in: Vulnerability Discovery Vulnerability Disclosure Exploitation and Remediation The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, a…