Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More - SWN #628

Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…

Interview with Casey Ellis Our focus for this interview with Casey Ellis are the massive changes in: Vulnerability Discovery Vulnerability Disclosure Exploitation and Remediation The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, a…

As the prevalence of AI continues to grow, more and more people are worried about their online safety. New scams seem to be popping up every day, packaged in creative and terrifying ways. How do you protect yourself? Frank Riccardi, Author of CTRL+ALT+PWN: The Hacker’s Playbook (And How to Beat It…

In the security news this week: In the security news this week: Cisco says patch faster, then sells you time Turning AI refusals into vulnerability signals Brotli’s are hiding WordPress image upload exploit Fortinet ships fixes before details PHP2Shell still claiming victims, including fir…