Prioritization Is Dead: Every CVE Has an Exploit Now | Shimon Tolts
From Security Unfiltered · 00:38:53
Show by Joe South
Joe's site: https://south-security.comNewsletter: https://south-security.com/newsletterShimon Tolts, co-founder and CEO of Copperhelm, AWS Hero, and CNCF and Claude Ambassador, joins Joe South on Security Unfiltered.Shimon argues 2026 collapsed the remediation window: AI writes exploits on demand, so "is there a public exploit?" is the wrong question and severity-based prioritization is dead. They get into FedRAMP shrinking critical remediation from 30 days to 12 hours, validating reachability and runtime instead of trusting CVSS, tailored WAF and eBPF policies as compensating controls, and why autonomous remediation is a people and process problem more than a tech one. Plus whether we're the last generation of coders, why GitHub and Git are hitting their limits, AI loops that improve themselves, token costs on the API side, and how AI is changing who gets to build.Shimon Tolts: https://www.linkedin.com/in/shimontolts/ (verify)Copperhelm: https://copperhelm.com (verify)Show site: https://www.securityunfiltered.comAffiliates➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh➡️ OffGrid Coupon Code: JOE➡️ Unplugged Phone: https://unplugged.com/Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.Tesla Referral Code: https://ts.la/joseph675128Follow the Podcast on Social Media!Instagram: https://www.instagram.com/secunfpodcast/Twitter: https://twitter.com/SecUnfPodcast
More episodes of Security Unfiltered
More episodes
- AI Agent Guardrails: OpenAI Sandbox Escape | Bill Gurling, Rubrik
- Open Models Will Do Anything: AI Is Speeding Up Attacks | Rob Chapman, ArmorCode
- AI Agents Are Deleting Production. Cloud Security Has to Catch Up | Matt Lea
- Securing AI at Scale: Why Your Logs Can't Read Agent Intent | Ashish Rajan
- Joe Grand: The Hardware Hack That Can Never Be Patched
- Your AI Agents Will Try Every Permission You Gave Them | Nadav Cornberg Eve
- Why Antivirus Fails at File Scanning | OPSWAT CEO Benny Czarny on CDR
- 100,000 OAuth Grants Later, Security Teams Still Can’t See the Risk
- Breaking the Sky: How Vulnerable Are Our Satellites?
- The Future of AI: Security, Ethics, and Human Augmentation
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.