The End of Bug Bounty As We Know It
Security testing & vulnerability management
If AI can find and validate vulnerabilities faster than people, why would a company keep paying outsiders to report them?
Listen to the episodeAll topics
Security testing & vulnerability management
SAST, DAST, fuzzing, penetration testing, bug bounty, triage, vulnerability scoring and remediation.
Conversations
Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World
Security testing & vulnerability management
Is DAST disappearing, or is AI penetration testing giving its underlying techniques a new market?
Listen to the episodeThe Mythos Problem: When AI Finds Every Vulnerability
Security testing & vulnerability management
In this episode, we break down the “AI Vulnerability Storm” and what happens when AI can find—and exploit—vulnerabilities faster than humans can fix them.
Listen to the episodeIs it Necessary? Not everything requires an LLM
Security testing & vulnerability management
We debate the necessity and efficiency of LLMs in finding code vulnerabilities in a C library compared to traditional static code analyzers and fuzzing techniques.
Listen to the episodeBug Bounty Theater and Responsible Bug Bounty
Security testing & vulnerability management
Izar, Matt, and Chris discuss the effectiveness of bug bounty programs and delve into topics such as scoping challenges, the ethical considerations of selling exploits, and whether it is all just bug bounty theater.
Listen to the episodeCVSS 4.0 Unleashed with Patrick Garrity
Security testing & vulnerability management
Patrick Garrity joins the Security Table to unpack CVSS 4.0, its impact on your program, and whether or not it will change the game, the rules of how the game is played, or maybe the entire game.
Listen to the episodeThe Hamster Wheel of Scan and Fix
Security testing & vulnerability management
Matt and Izar join in a debate with Chris Romeo as he challenges the paradigm of "scan and fix" in application security.
Listen to the episodeJim Manico ❤️ Threat Modeling: The Untold Story
Security testing & vulnerability management
Jim Manico joins Chris, Matt, and Izar at the Security Table for a rousing discussion on his Threat Modeling journey.
Listen to the episodeCapture the Flag or NOT?
Security testing & vulnerability management
There is an overemphasis on Capture The Flag in the security world.
Listen to the episodeReasonable Software Security: Do We Really Need DAST?
Security testing & vulnerability management
In this episode of the Security Table, the gang discusses reasonable software security.
Listen to the episode