Podcast

Why Finding Bugs Still Isn’t Commoditized

The AISLE CEO on the jagged frontier, sovereign AI, and why remediation is still the hard part.

Secure Vibe Coding and the 99%

Lovable's CISO on soft guardrails, shared responsibility on an AI development platform, and what GRC engineering looks like when the attackers are AI-powered too.

Building a System of Truth for the CISO

The system record security leaders never had but desperately need

The Real Price Tag On Cyber Breaches

What breaches actually cost organizations, from the team behind the DBIR

Cyber Investing in the AI Exploit Era

Exploring what happens to security, and security investing, when vulnerability discovery becomes a continuous output of computation.

Slopdemic, Not Vulnpocalypse (Yet)

AI has collapsed the cost of finding and reporting vulnerabilities at the same time, and Casey Ellis breaks down what that means for bug bounties, open source, and security research policy.

AI, Cyber, and Where the Smart Money Is Going

Digging into the state of security venture in the AI era, Decibel's $100M seed bet on Ent, and where one of cyber's most active early-stage investors is placing his next bets.

Why Restricting AI Makes Us Less Secure

Frontier model restriction, the jagged frontier, Chinese open weights, and why AI cybersecurity will be won through defender adoption.

Cyber Valuations, Moats & the Road to Black Hat

An annual check-in with Foundation Capital’s Sid Trivedi on services-as-software, record AI SOC rounds, founder caution, and what’s actually defensible in the age of frontier labs.

Building an AI AppSec Engineer

Why MTTR is quietly lying to your AppSec team

Exposure Management in the Age of AI

The dual nature of AI for defenders and attackers and evolving VulnMgt with Tenable's CPO

Why 70,000 CVE's is Less Scary Than It Sounds

The count is exploding, the exploitable risk is flat, and Jerry Gamblin explains why

You Don't Need A Frontier Model to Find Zero Days

Why the Vulnpocalypse is overstated, what actually matters and the importance of security invariants

The Bottleneck Was Never Finding the Bugs

AI Industrialized the Vuln Lifecycle and Broke the System of Record

AI Is Winning the Cyber Arms Race

A look at AI's impact on cyber and the case for orienting around limiting the blast radius

Securing the Agentic SDLC

The count is exploding, the exploitable risk is flat, and Jerry Gamblin explains why

The Vulnpocalypse Playbook

Why the least glamorous discipline in security just became the most critical

The Agentic GRC Revolution

Rethinking legacy GRC through AI agents, autonomous workflows, and continuous assurance

Identity as Infrastructure in the Agentic Era

From Authentication to Authorization to Delegation — Rethinking IAM for the Agentic Era

AI SOC Got Commoditized - Now What?

Why AI Security Feels So Fragile

Ron Bennatan of Varonis on black boxes, agentic access patterns, and why the detect-and-alert playbook is running out of runway

You Can't Trust What You Can't Verify — The Case for AI Model Identity

Securing the Vibe: Tanya Janca on AI-Generated Code, Mythos, and the New AppSec Reality

The Industrialization of Exploitation

AI and the Future of Secure Coding