The Shrinking Exploit Window, Patch Schedule Changes, and the Vulnpocalypse

Episode notes

This week was blessedly free of any major supply chain compromises, so we start by talking about new research from Anthropic on the shrinking window between bug disclosure and exploitation, then we discuss the changing patch schedule for Cisco and how all of this is changing the prioritization process for security teams, and finally we discuss some upcoming episodes and our latest hacker movie podcast on The Conversation. Links Anthropic research: Cisco patch change : The Vulnpocalypse :

• Fable 5 Export Controls, the Dual Use Paradox, and the ARToken Phishing Framework41 / 100
• The (Bug) Disclosure Day Conundrum and How AI is Changing the Game with Katie Moussouris
• The Gaslight macOS Backdoor, Cisco Zero Day Exploit, and Operation Endgame
• How Much Do Data Breaches Really Cost? | Alex Pinto
• How The Conversation Predicted Our Surveillance Society 50 Years Ago