The End of Bug Bounty As We Know It
We dig into Linus Torvalds' claim that AI is now a legitimate tool for the Linux kernel, and what it means for bug bounty platforms drowning in submissions, with Bug Crowd reporting a fourfold spike i...
5 Aug 42min
Make No Mistakes: Inside the First "Agentic Ransomware"
We dig into Sysdig's Jade Puffer report, the so-called first agentic ransomware, and argue about whether the evidence actually proves an LLM was driving the attack or if it's just a well-trained scrip...
22 Jul 43min
Is Spec-Driven Development Already Dead
In this episode, we take on spec-driven development, the resurgent idea that writing a detailed spec and letting AI implement it will finally give us the precision engineering promised us since the 19...
15 Jul 41min
Don't Bury the Model T: Why STRIDE Still Drives in an AI World
In this episode, we dig into two things the security community loves to argue about: npm finally doing the right thing and whether STRIDE has any business being called dead. The npm v12 changes gate d...
1 Jul 59min
Realists At The Table: How To See Through The Hype
In this episode, we dig into how the cybersecurity personality has shifted from the ego-driven, hoodie-up archetype to the paycheck-chasing newcomer. The conversation covers hype cycles from mainframe...
17 Jun 37min
The Agentic Access Problem: When AI Becomes Its Own Administrator
In this episode, we explore what happens when AI agents meet the security principle of least privilege. As agents gain the ability to request permissions, make decisions, and interact with systems on ...
3 Jun 40min
The Tool Creep Problem: When More Security Means Less Security
In this episode, we break down why security budgets keep growing while organizations keep falling further behind. We explore how tool creep has quietly shifted from a nuisance into an active attack su...
8 Mai 42min
