Patch and move on? Why vulnerability response doesn't end there

Unable to add items

Sorry, we're unable to add the item because your cart is already full.

Add to basket failed.

Please try again later

Add to wishlist failed.

Please try again later

Failed to remove from Wish List.

Please try again later

Adding to library failed

Please try again

Unable to follow podcast

Unable to unfollow podcast

Patch and move on? Why vulnerability response doesn't end there

Listen for free

View show details

Season's Savings | 0.99 €/month for 3 months

5.99 €/month thereafter - terms apply. Cancel monthly.

Fresh off the PHP2Shell advisory, former DHS CISO and acting deputy CIO Hamad Baidwan — now executive CISO at Knox Systems, the largest federal managed cloud — joins Safe Mode to break down what actually happens in the hours after a high-severity vulnerability drops. He walks through why "patch it and move on" gives teams a false sense of security, how to map internet reachability in environments that change by the hour, and what a CISA KEV listing really signals to defenders. Baidwan also reflects on writing DHS's first-ever AI cybersecurity guidance, what he'd add to that playbook today — starting with AI agent identity — and why he thinks compliance has drifted into security theater.

No reviews yet