Rich Stroffolino

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of

By Rich Stroffolino Dennis Pickett , vp and CISO, RTI International , and David Cross , CISO, Atlassian

Attack surface and vulnerability management has never felt more urgent, and it's not hard to see why: every time a new AI model ships, security teams feel the ground shift again. But the deeper problem isn't the pace of new models, it's prioritization. Vulnerability scanners flood teams with findings, but they don't tell you which flaws chain together into a real path from exploit to endpoint, the kind of risk that matters most. That's especially true in healthcare, where accelerating “do more, go faster” initiatives are colliding with devices and systems tied directly to patient care. And there's a second, quieter risk that traditional scanning misses entirely: the misconfigurations security teams introduce themselves, often without ever knowing it.

Every agentic security pitch promises to give teams back time, but the fine print often reads more like a replacement plan. If buying back time and cutting headcount look identical on a balance sheet, how can anyone tell which story a vendor is actually selling?

Our topic of discussion will be “Hacking AI FOMO: An hour of critical thinking about what it costs to say yes before security has answers.”

Russian-linked attacks hit naval shipbuilder Researchers at Symantec's Threat Hunter team recently tracked a series of attacks from the

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of

By Rich Stroffolino AI widens the attack surface, and patches that once seemed settled can combine in new ways to break everything

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of

Our topic of discussion will be “Hacking the Next Inevitable Cyber Panic: An hour of critical thinking about how to be ready when the next PHP2Shell-level exploit comes for everyone.”