
It's been a rough week for cybersecurity, and the crew is back to unpack the PHP vulnerability crisis, the controversy surrounding Chainguard's early disclosure, and why responsible disclosure is becoming increasingly complicated.Elliot, Troy, and Kendra dig into how AI is accelerating vulnerability discovery, why traditional patching strategies aren't keeping up, and whether defenders need to fundamentally rethink vulnerability management.Plus, the conversation somehow takes a detour through OnlyFans (thanks Kendra), cybersecurity marriage advice, and the questionable business potential of reading SOC 2 reports online.In this episode:The PHP vulnerability crisis and Chainguard's disclosure controversyResponsible disclosure versus protecting customersAI's impact on zero-days and vulnerability managementWhy risk-based prioritization matters more than everWhether AI agents can help defenders keep pace with attackers Hosted on Acast. See acast.com/privacy for more information.
Podzilla Summary coming soon
Sign up to get notified when the full AI-powered summary is ready.
Free forever for up to 3 podcasts. No credit card required.

The Pentagon just slammed the brakes on CMMC Phase II

AMA: GRC, SOC 2, and the State of Audits

Do Ethical GRC auditors really exist?

SOC 2, Vibes, and the Audit Arms Race
Free AI-powered recaps of GRC Uncensored and your other favorite podcasts, delivered to your inbox.
Free forever for up to 3 podcasts. No credit card required.