Tod Beardsley

Tod Beardsley, VP of Security Research at RunZero and an expert in security, discusses the shortcomings of traditional vulnerability management. He emphasizes the failure of CVE-centric approaches and highlights the importance of addressing issues like default credentials and misconfigurations. The conversation dives into recent NPM supply chain attacks, the fragility of the ecosystem, and community-driven solutions. Beardsley also touches on the latest trends in AI acquisitions and the cautious embrace of agentic AI within the banking sector.

In this discussion, Patrick Garrity, a security researcher at VulnCheck, and Tod Beardsley, VP of Security Research at RunZero, dive into the complex world of cybersecurity vulnerabilities. They explore the challenges of CVE numbering, the nuances of cyber attribution, and the ever-evolving threat landscape driven by state actors. The duo offers practical advice for CISOs on effective communication strategies to secure executive buy-in, along with insights into the critical need for strong defenses against ransomware and social engineering attacks.

Tod Beardsley, Vulnerability Analysis Lead at CISA, offers deep insights into the Known Exploited Vulnerabilities catalog. He explains its creation and practical usage in enhancing cybersecurity. The conversation also touches on the resurgence of pagers for secure communications, the implications of Android TV malware, and the complexity of supply chain vulnerabilities. Additionally, the group humorously explores the quirks of cryptography and the evolution of network security tools, blending technical analysis with engaging anecdotes.