Episodes (6)

A technical March 2026 vulnerability briefing focused on enterprise patching priorities. This episode examines browser and mobile exploit chains, Microsoft’s latest patch cycle, document-based intrusion risks, and why defenders need better prioritization beyond CVSS alone.

We cover:

• Chrome zero-days and the operational urgency of browser patching
• Apple’s Coruna-related fixes for legacy iOS and what that means for fleet management
• Microsoft Patch Tuesday with emphasis on Office, SQL Server, and privilege-escalation risk
• Malformed ZIP archive scanning gaps and why compensating controls still matter

This episode explores how artificial intelligence is reshaping the vulnerability management landscape – not just as a defensive tool, but as a new source of risk. Alex, Vanessa, and Daniel break down real-world examples such as February 2026 Patch Tuesday zero-days, AI-assisted exploit development, LLM-discovered 0-days, misconfigured Copilot-style agents, and noisy "AI slop" exploit traffic. They discuss what actually works today in AI-powered cyber defense versus hype, and share practical guidance for vulnerability management teams on how to adapt processes, metrics, and controls for an AI-driven threat environment.

Explore the record-breaking CVE disclosures in 2025 and how AI-driven vulnerabilities are reshaping the threat landscape. Gain insights on Fortinet's critical exploits, emerging trends in regional research, and strategic lessons for managing vulnerabilities in 2026.