Shifting Cyber Turtles with Casey Ellis, the Vibe Check, and the News - Casey Ellis - ESW #483

Our focus for this interview with Casey Ellis are the massive changes in:

• Vulnerability Discovery
• Vulnerability Disclosure
• Exploitation and Remediation

The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, and defenders need to do to ensure 2027 isn't a total train wreck?

This week's vibe check explores the question, which security project always takes twice as long as planned?

• 55% - Enforcing data classification
• 18% - SOAR automation buildout
• 9% - Rolling out SSO
• 9% - Moving to passwordless auth
• 9% - AI agent discovery
• 0% - Other

Finally, in the enterprise security news,

1. funding and M&A
2. PHP2Shell update
3. floods of bugs
4. silent train
5. breaches
6. the script kiddy bar has been lowered
7. the basics continue to be important
8. an AI lab pulls a PR stunt
9. an old squirrel story was a scam!

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-483