Generative AI

Executive Decision Guide_AI-ML

AI benefits/risks

AI/ML

Nexus

Executive Decision Guide

What model access failure costs the business

Tech Explainer_AI-ML

Tech Explainer

The AI Security Control Problem: Why AI Requires a Different Security Discipline

Executive Decision Guide_Identity

What Authenticity Failure Costs the Business

What AI Validation Actually Tests

<body>AppSec has always emphasized techniques and tools for discovering vulns, along with taxonomies and lists for describing them. But just piling up more CVEs into a prioritized patching queue has never been an effective strategy. Nidhi Aggarwal talks about some of the economics and decisions that orgs evaluate when figuring out how to improve and protect their software. LLMs might be effective assistants in generating code, but only when they have the context of secure patterns to follow. We also talk about what some of the bug bounty data reveals in terms of successful researchers finding more impactful vulns and why the combination of domain expertise and curiosity remains profitable.</body>

<body>AppSec has always emphasized techniques and tools for discovering vulns, along with taxonomies and lists for describing them. But just piling up more CVEs into a prioritized patching queue has never been an effective strategy. Nidhi Aggarwal talks about some of the economics and decisions that orgs evaluate when figuring out how to improve and protect their software. LLMs might be effective assistants in generating code, but only when they have the context of secure patterns to follow. We also talk about what some of the bug bounty data reveals in terms of successful researchers finding more impactful vulns and why the combination of domain expertise and curiosity remains profitable.</body>

<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.hackerone.com/blog/finding-fast-fixing-slow-rising-exposure-debt">https://www.hackerone.com/blog/finding-fast-fixing-slow-rising-exposure-debt</a></li>
</ul>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.hackerone.com/blog/finding-fast-fixing-slow-rising-exposure-debt">https://www.hackerone.com/blog/finding-fast-fixing-slow-rising-exposure-debt</a></li></ul></body>

<body>Vulnerability discovery and remediation gap in the AI era</body>

<body>Vulnerability discovery and remediation gap in the AI era</body>

<body>AI-generated code is changing how vulnerabilities are created, discovered, and managed. This segment explores why finding more vulnerabilities doesn’t necessarily mean reducing exposure, how teams can validate exploitability and prioritize real risk, and where agentic AI can support defenders without replacing human security expertise. It also looks at what continuous threat exposure management means for enterprise security teams in practice.</body>

<body>AI-generated code is changing how vulnerabilities are created, discovered, and managed. This segment explores why finding more vulnerabilities doesn’t necessarily mean reducing exposure, how teams can validate exploitability and prioritize real risk, and where agentic AI can support defenders without replacing human security expertise. It also looks at what continuous threat exposure management means for enterprise security teams in practice.</body>

<body>Everyone's a Builder Now: Securing the AI-Powered Enterprise: Black Hat Interview with Gil Geron, CEO of Orca Security</body>

<body>Everyone's a Builder Now: Securing the AI-Powered Enterprise: Black Hat Interview with Gil Geron, CEO of Orca Security</body>

<body>AI is fundamentally changing software development, turning employees across the business into builders and reshaping how organizations think about innovation and risk. In this session, Orca Security CEO Gil Geron explores what this shift means for enterprise leaders and why security must evolve alongside the next generation of AI-powered software creation.</body>

<body>AI is fundamentally changing software development, turning employees across the business into builders and reshaping how organizations think about innovation and risk. In this session, Orca Security CEO Gil Geron explores what this shift means for enterprise leaders and why security must evolve alongside the next generation of AI-powered software creation.</body>

<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://orca.security/resources/press-releases/orca-security-extends-its-platform-to-the-new-generation-of-ai-builders/">https://orca.security/resources/press-releases/orca-security-extends-its-platform-to-the-new-generation-of-ai-builders/</a></li>


<li><a rel="noopener" target="_blank" href="https://orca.security/platform/ai-appgen-security/">https://orca.security/platform/ai-appgen-security/</a></li>
</ul>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://orca.security/resources/press-releases/orca-security-extends-its-platform-to-the-new-generation-of-ai-builders/">https://orca.security/resources/press-releases/orca-security-extends-its-platform-to-the-new-generation-of-ai-builders/</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://orca.security/platform/ai-appgen-security/">https://orca.security/platform/ai-appgen-security/</a></li></ul></body>

<body>This segment is sponsored by Orca Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/orcabh">https://securityweekly.com/orcabh</a> to learn more about them!</body>

<body>This segment is sponsored by Orca Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/orcabh">https://securityweekly.com/orcabh</a> to learn more about them!</body>

<body>Bugcrowd Launches Pathseeker: Flipping the Script on Traditional Pentesting: Black Hat Interview with Braden Russell, CTO of Bugcrowd</body>

<body>Bugcrowd Launches Pathseeker: Flipping the Script on Traditional Pentesting: Black Hat Interview with Braden Russell, CTO of Bugcrowd</body>

<body>Bugcrowd is launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line, which combines continuous agentic pentesting with on-demand human validation. The launch comes as the security industry grapples with a growing "AI slop" problem, where unchecked AI-generated vulnerability reports have overwhelmed bug bounty programs and even forced some, like Curl, to shut theirs down. Braden will unpack how Bugcrowd is positioning Savant Pathseeker as a response to that industry-wide trust problem, not just a new product launch.</body>

<body>Bugcrowd is launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line, which combines continuous agentic pentesting with on-demand human validation. The launch comes as the security industry grapples with a growing "AI slop" problem, where unchecked AI-generated vulnerability reports have overwhelmed bug bounty programs and even forced some, like Curl, to shut theirs down. Braden will unpack how Bugcrowd is positioning Savant Pathseeker as a response to that industry-wide trust problem, not just a new product launch.</body>

<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.bugcrowd.com/products/pathseeker/">https://www.bugcrowd.com/products/pathseeker/</a></li>


<li><a rel="noopener" target="_blank" href="https://www.bugcrowd.com/press-release/bugcrowd-introduces-savant-pathseeker-delivering-continuous-agentic-pentesting-across-the-attack-surface/">https://www.bugcrowd.com/press-release/bugcrowd-introduces-savant-pathseeker-delivering-continuous-agentic-pentesting-across-the-attack-surface/</a></li>


<li><a rel="noopener" target="_blank" href="https://www.bugcrowd.com/products/platform">https://www.bugcrowd.com/products/platform</a></li>


<li><a rel="noopener" target="_blank" href="https://www.bugcrowd.com/products/ai-powered-security-intelligence/">https://www.bugcrowd.com/products/ai-powered-security-intelligence/</a></li>
</ul>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.bugcrowd.com/products/pathseeker/">https://www.bugcrowd.com/products/pathseeker/</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bugcrowd.com/press-release/bugcrowd-introduces-savant-pathseeker-delivering-continuous-agentic-pentesting-across-the-attack-surface/">https://www.bugcrowd.com/press-release/bugcrowd-introduces-savant-pathseeker-delivering-continuous-agentic-pentesting-across-the-attack-surface/</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bugcrowd.com/products/platform">https://www.bugcrowd.com/products/platform</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.bugcrowd.com/products/ai-powered-security-intelligence/">https://www.bugcrowd.com/products/ai-powered-security-intelligence/</a></li></ul></body>

<body>Apply for early access at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/bugcrowdbh">https://securityweekly.com/bugcrowdbh</a></body>

<body>Apply for early access at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/bugcrowdbh">https://securityweekly.com/bugcrowdbh</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14858″} podcast from PPWorks

Application security

Bug Bounties

Fixing Software Weaknesses Rather Than Just Finding More Flaws – Nidhi Aggarwal, Gil Geron, Braden Russell – ASW #398

What AI Security Failures Mean for Enterprise Risk

API Application Programming Interface Concept. A programmer types on a laptop, interacting with digital icons representing API development, security, and cloud computing. Application Software Tool,

Buyer's Guide

How to Evaluate AI Red Teaming and AI Application Security Platforms

Visualizing the dangers of unreliable algorithms and model collapse in artificial intelligence.