All topics
This week was blessedly free of any major supply chain compromises, so we start by talking about new research from Anthropic on the shrinking window between bug disclosure and exploitation, then we discuss the changing patch schedule for Cisco and how all of this is changing the prioritization process for security teams, and finally we […]
“Because this activity predates Oracle's June 10, 2026 advisory, the vulnerability was exploited as a zero-day," said Mandiant researchers.
Anthropic researchers warned that modern AI tools are further intensifying the existing issue of threat actors creating N-day exploits.
The vulnerability is a critical one and Check Point Research said that it’s likely that the actor targeting the bug is a financially motivated group.
Microsoft's reaction to the Nightmare-Eclipse saga is raising memories of the worst days of the disclosure debate.
Finding a huge pile of bugs with Claude Mythos is great, but the logical next step is figuring out how many of those vulnerabilities are likely to be exploited in the near future. Jay Jacobs and Michael Roytman of Empirical Security join Dennis to talk about how the Exploit Prediction Scoring System can help teams […]
