The Debate: Is the CIA Triad Truly Dead?
The Security Table22 Loka 2025

The Debate: Is the CIA Triad Truly Dead?

We’re debating an online article claiming that the CIA Triad (Confidentiality, Integrity, Availability) is a relic and needs to be updated for 21st-century threats. The discussion includes whether new properties like authenticity, accountability, and resilience should be incorporated into modern security models. And we delve into the use of analogies, system properties versus values, and the role of ethical considerations in cybersecurity. Listen along to our discussion on whether the foundat...

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(114)

When Code No Longer Matters

When Code No Longer Matters

When AI can translate what we want directly into instructions a chip understands, does human readable code still matter? Matt argues it always will. Izar calls the whole premise one of the stupidest t...

23 Syys 36min

Why AI Cheats To Win

Why AI Cheats To Win

When Anthropic's Mythos 5 model believed it was working inside an isolated test environment, it built and published a real malicious Python package to PyPI while chasing a capture-the-flag goal — and ...

16 Syys 39min

When AI Escapes the Sandbox

When AI Escapes the Sandbox

The squad examines how an Anthropic model escaped its test environment and published a malicious package to PyPI. The conversation explores reward hacking, AI ethics, and why stronger security control...

9 Syys 49min

The End of Bug Bounty As We Know It

The End of Bug Bounty As We Know It

We dig into Linus Torvalds' claim that AI is now a legitimate tool for the Linux kernel, and what it means for bug bounty platforms drowning in submissions, with Bug Crowd reporting a fourfold spike i...

5 Elo 42min

Make No Mistakes: Inside the First "Agentic Ransomware"

Make No Mistakes: Inside the First "Agentic Ransomware"

We dig into Sysdig's Jade Puffer report, the so-called first agentic ransomware, and argue about whether the evidence actually proves an LLM was driving the attack or if it's just a well-trained scrip...

22 Heinä 43min

Is Spec-Driven Development Already Dead

Is Spec-Driven Development Already Dead

In this episode, we take on spec-driven development, the resurgent idea that writing a detailed spec and letting AI implement it will finally give us the precision engineering promised us since the 19...

15 Heinä 41min

Don't Bury the Model T: Why STRIDE Still Drives in an AI World

Don't Bury the Model T: Why STRIDE Still Drives in an AI World

In this episode, we dig into two things the security community loves to argue about: npm finally doing the right thing and whether STRIDE has any business being called dead. The npm v12 changes gate d...

1 Heinä 59min

Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World

Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World

In this episode, we dig into whether DAST is dead, mostly dead, or quietly making a comeback dressed in an AI trench coat. The conversation traces the origins of dynamic application security testing f...

24 Kesä 42min