Patch It Like You Stole It: Vulnerability Management Lifestyle Choices - Matthew Toussain - ESW #403

Security Weekly Podcast Network (Video)

Content provided by Security Weekly Productions and Security Weekly. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Security Weekly Productions and Security Weekly or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.

9d ago 34:44

MP4•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on April 27, 2025 09:17 (3d ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

What a time to have this conversation! Mere days from the certain destruction of CVE, averted only in the 11th hour, we have a chat about vulnerability management lifecycles. CVEs are definitely part of them.

Vulnerability management is very much a hot mess at the moment for many reasons. Even with perfectly stable support from the institutions that catalog and label vulnerabilities from vendors, we'd still have some serious issues to address, like:

disconnects between vulnerability analysts and asset owners
gaps and issues in vulnerability discovery and asset management
different options for workflows between security and IT: which is best?
patching it like you stole it

Oh, did we mention Matt built an open source vuln scanner?

https://sirius.publickey.io/

Show Notes: https://securityweekly.com/esw-403

4508 episodes

#Tech #Tech News #Hacking #Hackingnews #Security #Securitynews #Security Weekly #News #Video #Security Weekly Productions #SecurityWeek