Blogs
The Agentic SOC Is Here: …
Security Bros - Episode 8 - The Agentic SOC Is Here: How AI Is Rewriting Cybersecurity Defense
Twelve weeks. That’s how long large enterprises took to patch Log4Shell on average. Twelve weeks after one of the most publicized critical vulnerabilities in recent memory, …
Why Your Vulnerability …
Security Bros - Episode 7 - Why Your Vulnerability Backlog Will Never Get Fixed (And How AI Changes That)
62% of cloud security incidents come from vulnerabilities your team already knew about. The problem isn’t visibility. It’s remediation. AI is changing that …
OWASP Top 10 LLM …
Security Bros - Episode 6 - OWASP Top 10 LLM Vulnerabilities: Real AI Security Risks
A lawyer submitted fictional court cases to a federal judge, sourced directly from ChatGPT. Samsung engineers leaked proprietary source code within 20 days of lifting their ChatGPT ban. Air …
OWASP Top 10 2025: What …
Security Bros - Episode 5 - OWASP Top 10 2025: What Changed, What Moved, and What to Do About It
The OWASP Top 10 2025 dropped late last year, and a few things stand out immediately. Some of the shifts confirm what security teams have been dealing with on the ground. Others …
You have too many …
Security Bros - Episode 4 - You have too many identity issues
In this episode of Security Bros, hosts Rocky and John discuss the complexities of identity management in the cybersecurity landscape, particularly in the cloud era. They explore the challenges of identity sprawl, the balance between …
Crowdstrike Proved Patch …
Security Bros - Episode 3 - Patch Management Is Broken and Crowdstrike Proved it
In this episode the Security Brothers, Rocky and John Giglio delve into the complexities of patch management and vulnerability management in the tech industry. They discuss the ongoing challenges faced by security …