What to do 'til the bugpocalypse gets here

In this podcast episode Brad Arkin joins James Wilson to discuss how defenders can get ahead of the late-running bugpocalypse. While we’re confident the offensive cybersecurity capabilities of frontier and open-weight LLMs are real, attackers don’t yet seem able to fully utilise them. This creates a window of opportunity for defenders to tackle the threat. There are a few well-funded and seemingly overlapping industry efforts under way including Athena, Akrites, and Patch the Planet. But, as Brad says in this interview, there’s too much focus on fixing bugs and traditional vulnerability triage, and not enough on exploring how to make entire classes of vulnerabilities inert. Show notes