SOAR, Cody Cornell - Enterprise Security Weekly #127

Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…

In the security news this week: In the security news this week: Cisco says patch faster, then sells you time Turning AI refusals into vulnerability signals Brotli's are hiding WordPress image upload exploit Fortinet ships fixes before details PHP2Shell still claiming victims, including fir…

CyberSN just released their Cybersecurity Jobs Report through September 2026. We'll cover that in the leadership and communications segment along with, Only 7% of CISOs at Large Companies Own AI Governance, Our Favorite Management Tips on Delegating Effectively, CIOs unprepared for agentic workforc…

Interview with Casey Ellis Our focus for this interview with Casey Ellis are the massive changes in: Vulnerability Discovery Vulnerability Disclosure Exploitation and Remediation The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, a…