In Episode 30, Rick shares the biggest takeaways from two invite only executive conferences, Palo Alto Networks in Napa and CDW in Arizona, where the agenda was 85% AI. We cover scaling laws, frontier vulnerability models and virtual patching, rogue agents as the new social engineering, harnesses over models, dynamic AI honeypots, and why CISOs are landing in the boardroom.

Then we break down how the PCI Council and AICPA say AI should be audited, and dig into the PHP apocalypse: a pre auth RCE hitting unsupported PHP versions everywhere, and what you should be doing right now. Plus Knob Creek 21 Year and a supermarket freezer hack. 🥃

⏱️ TIMESTAMPS:

00:00 Intro
01:28 Welcome Back & Rick's Conference Tour 🎉
04:20 85% AI, 10% Quantum: The Main Themes
05:24 Scaling Laws & What They Mean for Security
12:04 Frontier Vuln Models & Virtual Patching
18:29 The Risk of Chinese Open Weight Models
23:36 Rogue Agents: The New Social Engineering
28:01 Harnesses Over Models
36:54 Dynamic AI Honeypots
38:20 CISOs in the Boardroom
52:15 Human Oversight & Re-engineering Processes
57:51 🥃 Knob Creek 21 Year
1:00:34 PCI Council & AICPA: How to Audit AI
1:33:15 The PHP Apocalypse 👀
1:37:28 Leaked on Hacker News: Disclosure Moved Up
1:39:46 OT, Vendor SBOMs & How to Prepare
1:56:42 The Supermarket Freezer Hack
1:58:15 Wrap-Up

🎙️ Hosts

• Justin Leapline, @justinleapline
• Joe Wynn, @wynnjoe
• Rick Yocum, @rickyocum

📬 Send Us Your Questions!
ask@distilledsecuritypodcast.com

🌐 Connect with Us

Website: distilledsecuritypodcast.com

X: @DisSecPod
Email: hello@distilledsecuritypodcast.com

👍 Like, comment, and subscribe for monthly security and compliance insights.