More The Secure Disclosure episodes
Published 2 Apr 2026
Duration: 00:35:05
Ethical hacking evolved from underground communities to enterprise-driven security frameworks, addressing stigma and legacy systems, AI's dual role in threat detection and synthetic risks, and the need for secure-by-design practices, hybrid human-AI strategies, and managing supply chain vulnerabilities amid evolving cyber threats.
Casey Ellis, founder of Bugcrowd, joins the show to talk about the evolution of bug bounty, how hackers went from outsiders to strategic assets, and w...
The text explores the evolution of ethical hacking and its integration into enterprise security, tracing Caseys journey from an early interest in hacking during the digital transition of the 1980s to founding Bug Boundary (originally Bug Crowd) in 2012. This platform aimed to bridge the gap between ethical hackers and organizations by legitimizing their role in addressing vulnerabilities, moving away from the stigma of labeling them as criminals. Challenges discussed include the limitations of traditional security models, such as outdated payment structures for penetration testing and the lack of centralized scaling for early bug bounty programs. The text emphasizes how Bug Boundary accelerated the adoption of crowdsourced security testing, positioning ethical hacking as a strategic enterprise solution.
A significant focus is placed on AIs transformative impact on cybersecurity, both as a threat and a tool. AI amplifies existing vulnerabilities by accelerating exploitation and report generation, compressing the OODA loop (observe, orient, decide, act) to a point where human response is insufficient. This has introduced challenges like AI-generated synthetic reports, which blur the line between genuine and fake threats, straining automated triage systems. The text also examines the scalability issues in bug bounty programs, including managing floods of vulnerability submissions, differentiating valid reports from noise, and balancing public vs. private program risks. Proposed solutions include leveraging AI for triage, improving community-driven accountability, and refining incentive structures to prioritize high-value, hard-to-find bugs over low-effort or AI-generated ones.
The discussion extends to future trends in cybersecurity, such as the unresolved risks of supply chain vulnerabilities, the evolving role of AI in coding and security (as a "force multiplier" for human engineers), and the persistent human factors in securitylike error-prone behavior and over-permissioning. The text highlights the need for organizations to adopt mature vulnerability management practices, secure-by-design systems, and adaptive strategies to address emerging threats, including quantum computing and AI-driven robotics. Ultimately, it underscores the hybrid necessity of combining AI automation with human creativity to navigate the complex, ever-evolving landscape of cybersecurity, while ensuring ethical and effective community engagement.
16 Jun 2026 Your Microphone Became a Keylogger w/ David vonThenen
Machine learning analyzes keystroke acoustic signatures to infer typed characters over remote platforms, highlighting high accuracy with known keyboards, privacy risks from surveillance, and challenges in noise and variability, while proposing defenses and noting AI's dual-use implications.
9 Jun 2026 Understand the Software Supply Chain Chaos w/ Roeland Delrue
Rapidly evolving supply chain security threats, including malicious open-source components and AI-driven malware, demand advanced AI-powered solutions like Akito Securitys self-securing software and tailored tools to address vulnerabilities in developer environments and package repositories.
28 May 2026 Prompt Injection Might Never Be Solved w/ Paul Vann
The text details AI security threats like prompt injection, jailbreak attacks, and distillation attacks, along with vulnerabilities such as AI bias and autonomous agent risks, highlighting detection challenges, emerging malware, supply chain exploits, and the industry's struggle to keep pace with rapidly evolving AI technologies.
22 May 2026 AI Broke the Security Ecosystem w/ Chris Hughes
Evolving cybersecurity challenges include supply chain threats, AI vulnerabilities, and outdated tools, highlighting the need for systemic reforms like developer incentives, regulatory clarity, and industry-government collaboration to address gaps in vulnerability management and the dual risks of AI's role in both threat detection and exploitation.
15 May 2026 PostHog is placing a wild bet on AI Coding w/ James Hawkins
Recommended: Should you go open source?
PostHog's open-source analytics platform prioritizes transparency, developer autonomy, and AI integration while critiquing corporate norms, emphasizing price clarity, building in public, and balancing automation with security governance in product development.