Podcast

Building an AI AppSec Engineer

Why MTTR is quietly lying to your AppSec team

Exposure Management in the Age of AI

The dual nature of AI for defenders and attackers and evolving VulnMgt with Tenable's CPO

Why 70,000 CVE's is Less Scary Than It Sounds

The count is exploding, the exploitable risk is flat, and Jerry Gamblin explains why

You Don't Need A Frontier Model to Find Zero Days

Why the Vulnpocalypse is overstated, what actually matters and the importance of security invariants

The Bottleneck Was Never Finding the Bugs

AI Industrialized the Vuln Lifecycle and Broke the System of Record

AI Is Winning the Cyber Arms Race

A look at AI's impact on cyber and the case for orienting around limiting the blast radius

Securing the Agentic SDLC

The count is exploding, the exploitable risk is flat, and Jerry Gamblin explains why

The Vulnpocalypse Playbook

Why the least glamorous discipline in security just became the most critical

The Agentic GRC Revolution

Rethinking legacy GRC through AI agents, autonomous workflows, and continuous assurance

Identity as Infrastructure in the Agentic Era

From Authentication to Authorization to Delegation — Rethinking IAM for the Agentic Era

AI SOC Got Commoditized - Now What?

Why AI Security Feels So Fragile

Ron Bennatan of Varonis on black boxes, agentic access patterns, and why the detect-and-alert playbook is running out of runway

You Can't Trust What You Can't Verify — The Case for AI Model Identity

Securing the Vibe: Tanya Janca on AI-Generated Code, Mythos, and the New AppSec Reality

The Industrialization of Exploitation

AI and the Future of Secure Coding

Your AI Agent Is Running As Root

The 350 Million Problem: Securing the Businesses No One Else Will

Before the Breach: The Zero Day Clock and the Race Against Exploitation

The Sandbox Everyone Suddenly Needs: Isolation for the Agentic Era

Securing the Future with Autonomous Defense

Selling Cyber - Deal Flow and Market Signals with Momentum Cyber

Exploiting AI IDEs

AI is Ready for Production, Security, Risk and Compliance Isn't

Hacking the OpenClaw Hype