Black October | Episode 76

In this episode of BHIS Presents: AI Security Ops, Bronwen Aker, Dr. Brian Fehrman, and guest Ethan Robish examine Black October, a wave of major cybersecurity vulnerability disclosures that sent the industry into a frenzy. Is AI accelerating the cybersecurity crisis, or simply exposing vulnerabilities that have been hiding in plain sight for years? From critical PHP vulnerabilities to compromised software dependencies, the team separates the headlines from the actual risks and explores how AI is changing the speed of vulnerability discovery. We dig into: - What sparked the Black October cybersecurity panic - PHP2Shell and other critical vulnerabilities making headlines - How AI is accelerating vulnerability discovery and changing patching timelines - Why defenders may need AI to keep pace with attackers - Lessons from the LiteLLM software supply chain compromise - Asset inventories, dependency management, and version pinning - Whether AI developers can realistically slow down cybersecurity capabilities - Why foundational security practices matter more than ever The takeaway: AI is accelerating vulnerability discovery, but the underlying security problems aren’t new. Organizations need to know what’s running in their environments, manage dependencies carefully, and improve their ability to detect and remediate vulnerabilities before attackers exploit them. The solution isn’t panic. It’s better security fundamentals. (00:00) - Intro: Black October (01:48) - What Is Black October? (04:16) - Critical Vulnerabilities and Industry Response (06:50) - How AI Is Accelerating Vulnerability Discovery (08:11) - Can Defenders Keep Pace with AI-Powered Attacks? (11:47) - LiteLLM and Software Supply Chain Security (13:22) - Defense in Depth: Asset Inventories and Dependencies (15:59) - Can AI Developers Slow Down Cybersecurity Capabilities? (18:20) - The Future of AI-Accelerated Vulnerability Discovery (19:10) - Final Takeaways: Don’t Panic, Fix the Fundamentals (21:06) - Closing Click here to watch this episode on YouTube. Creators & Guests Ethan Robish - Host Brian Fehrman - Host Bronwen Aker - Host Brought to you by: Black Hills Information Security https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testing https://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.com Click here to view the episode transcript.